everything-dev 1.53.1 → 2.0.0-rc.0

package/dist/service-descriptor.d.cts

@@ -1,5 +1,5 @@
 import { JsonObject, SourceMode } from "./types.cjs";
-import "effect";
+import { Context, Layer } from "effect";
 //#region src/service-descriptor.d.ts
 interface ServiceDescriptor {
   key: string;
@@ -19,8 +19,11 @@ interface ServiceDescriptor {
   ssr?: boolean;
   command?: string;
   args?: string[];
+  env?: Record<string, string>;
   readyPatterns?: RegExp[];
   errorPatterns?: RegExp[];
+  /** folder-form plugin UI port — the UI build is a child of this dev process (BOS_UI_PORT) */
+  uiPort?: number;
 }
 interface AppOrchestrator {
   packages: string[];

package/dist/service-descriptor.d.mts

@@ -19,8 +19,11 @@ interface ServiceDescriptor {
   ssr?: boolean;
   command?: string;
   args?: string[];
+  env?: Record<string, string>;
   readyPatterns?: RegExp[];
   errorPatterns?: RegExp[];
+  /** folder-form plugin UI port — the UI build is a child of this dev process (BOS_UI_PORT) */
+  uiPort?: number;
 }
 interface AppOrchestrator {
   packages: string[];

package/dist/service-descriptor.mjs

@@ -1,30 +1,55 @@
+import { existsSync } from "node:fs";
+import path from "node:path";
 import { Context, Layer } from "effect";
 
 //#region src/service-descriptor.ts
-var ServiceDescriptorMap = class extends Context.Tag("ServiceDescriptorMap")() {};
-var DevRuntimeConfig = class extends Context.Tag("DevRuntimeConfig")() {};
+/**
+* True when a `plugins.<id>` entry is the runtime-config mirror of the
+* app-slot auth plugin (same backend target) — the `auth` service already
+* spawns that backend, so the mirror contributes only its `ui` surface.
+* The single implementation; consumed by the service descriptors, the DAG,
+* the infra planner, and the dev session.
+*/
+function isAuthMirrorPluginEntry(authEntry, pluginId, pluginConfig) {
+	if (pluginId !== "auth" || !authEntry) return false;
+	if (pluginConfig === authEntry) return true;
+	if (pluginConfig.localPath && pluginConfig.localPath === authEntry.localPath) return true;
+	if (!pluginConfig.localPath && pluginConfig.source === "remote" && pluginConfig.url && pluginConfig.url === authEntry.url) return true;
+	return false;
+}
+var ServiceDescriptorMap = class extends Context.Service()("ServiceDescriptorMap") {};
+var DevRuntimeConfig = class extends Context.Service()("DevRuntimeConfig") {};
+var DevGeneratedEnv = class extends Context.Service()("DevGeneratedEnv") {};
+const DevGeneratedEnvLive = (env) => Layer.succeed(DevGeneratedEnv, env);
 const PLUGIN_READY_PATTERNS = [
 	/ready in/i,
 	/compiled.*successfully/i,
 	/listening/i,
 	/started/i
 ];
-const PLUGIN_ERROR_PATTERNS = [/error/i, /failed/i];
+const PLUGIN_ERROR_PATTERNS = [
+	/\bERROR in\b/,
+	/failed to compile/i,
+	/Module not found/i,
+	/Cannot find module/i
+];
 const SERVICE_CONFIGS = {
 	host: {
-		command: "bun",
+		command: "pnpm",
 		args: ["run", "dev"],
+		env: { NODE_OPTIONS: "--conditions=development" },
 		readyPatterns: [/Host (dev|production) server running at/i, /Server running at/i],
 		errorPatterns: [
-			/error:/i,
-			/failed/i,
+			/\berror\b(?!s)/i,
+			/\bfailed to\b/i,
+			/\bbuild failed\b/i,
 			/exception/i
 		],
 		defaultPort: 3e3,
 		readinessPath: "/health"
 	},
 	auth: {
-		command: "bun",
+		command: "pnpm",
 		args: ["run", "dev"],
 		readyPatterns: PLUGIN_READY_PATTERNS,
 		errorPatterns: PLUGIN_ERROR_PATTERNS,
@@ -32,27 +57,23 @@ const SERVICE_CONFIGS = {
 		readinessPath: "/remoteEntry.js"
 	},
 	ui: {
-		command: "bun",
+		command: "pnpm",
 		args: ["run", "dev"],
 		readyPatterns: [
 			/\bready\s+built in\b/i,
 			/\bLocal:\b/i,
 			/\bcompiled\b.*successfully/i
 		],
-		errorPatterns: [/error/i, /failed to compile/i],
+		errorPatterns: [
+			/\berror\b(?!s)/i,
+			/\bfailed to\b/i,
+			/\bbuild failed\b/i
+		],
 		defaultPort: 3003,
 		readinessPath: "/remoteEntry.js"
 	},
-	"ui-ssr": {
-		command: "bun",
-		args: ["run", "dev:ssr"],
-		readyPatterns: [/\bready\s+built in\b/i, /\bcompiled\b.*successfully/i],
-		errorPatterns: [/error/i, /failed/i],
-		defaultPort: 3004,
-		readinessPath: "/"
-	},
 	api: {
-		command: "bun",
+		command: "pnpm",
 		args: ["run", "dev"],
 		readyPatterns: PLUGIN_READY_PATTERNS,
 		errorPatterns: PLUGIN_ERROR_PATTERNS,
@@ -89,17 +110,9 @@ function buildServiceDescriptorMap(runtimeConfig, options) {
 		port: runtimeConfig.ui.port,
 		integrity: runtimeConfig.ui.integrity,
 		ssr,
-		...SERVICE_CONFIGS.ui
-	});
-	if (ssr && runtimeConfig.ui.source === "local") map.set("ui-ssr", {
-		key: "ui-ssr",
-		source: runtimeConfig.ui.source,
-		url: runtimeConfig.ui.ssrUrl ?? "",
-		entry: "",
-		name: "ui-ssr",
-		localPath: runtimeConfig.ui.localPath,
-		port: runtimeConfig.ui.ssrUrl ? Number.parseInt(new URL(runtimeConfig.ui.ssrUrl).port, 10) : (runtimeConfig.ui.port ?? 3003) + 1,
-		...SERVICE_CONFIGS["ui-ssr"]
+		...SERVICE_CONFIGS.ui,
+		env: { BOS_DEV_SERVER: "1" },
+		args: process.env.BOS_NO_WATCH === "1" ? ["run", "dev:built"] : SERVICE_CONFIGS.ui.args
 	});
 	map.set("api", {
 		key: "api",
@@ -134,10 +147,15 @@ function buildServiceDescriptorMap(runtimeConfig, options) {
 	if (runtimeConfig.plugins) {
 		let pluginBasePort = 3010;
 		for (const [pluginId, pluginConfig] of Object.entries(runtimeConfig.plugins)) {
+			const isAuthMirror = isAuthMirrorPluginEntry(runtimeConfig.auth, pluginId, pluginConfig);
 			const pluginKey = `plugin:${pluginId}`;
 			const resolvedPort = pluginConfig.port ?? pluginBasePort;
 			pluginBasePort = resolvedPort + 1;
-			map.set(pluginKey, {
+			const uiLocalPath = pluginConfig.ui?.localPath;
+			const isFolderFormUi = Boolean(uiLocalPath && pluginConfig.ui?.source === "local" && existsSync(path.join(uiLocalPath, "src", "routes")) && !existsSync(path.join(uiLocalPath, "package.json")));
+			const folderUiPort = pluginConfig.ui?.port ?? pluginBasePort;
+			if (isFolderFormUi) pluginBasePort = folderUiPort + 1;
+			if (!isAuthMirror) map.set(pluginKey, {
 				key: pluginKey,
 				source: pluginConfig.source,
 				url: pluginConfig.url,
@@ -150,14 +168,24 @@ function buildServiceDescriptorMap(runtimeConfig, options) {
 				proxy: pluginConfig.proxy,
 				variables: pluginConfig.variables,
 				secrets: pluginConfig.secrets,
-				command: "bun",
+				command: "pnpm",
 				args: ["run", "dev"],
+				env: isFolderFormUi ? { BOS_UI_PORT: String(folderUiPort) } : void 0,
+				uiPort: isFolderFormUi ? folderUiPort : void 0,
 				readyPatterns: PLUGIN_READY_PATTERNS,
 				errorPatterns: PLUGIN_ERROR_PATTERNS,
 				defaultPort: resolvedPort,
 				readinessPath: "/remoteEntry.js"
 			});
-			if (pluginConfig.ui?.localPath && pluginConfig.ui.source === "local") {
+			else if (isFolderFormUi) {
+				const authDescriptor = map.get("auth");
+				if (authDescriptor) map.set("auth", {
+					...authDescriptor,
+					env: { BOS_UI_PORT: String(folderUiPort) },
+					uiPort: folderUiPort
+				});
+			}
+			if (pluginConfig.ui?.localPath && pluginConfig.ui.source === "local" && !isFolderFormUi) {
 				const uiKey = `plugin-ui:${pluginId}`;
 				const uiPort = pluginConfig.ui.port ?? pluginBasePort;
 				pluginBasePort = uiPort + 1;
@@ -170,7 +198,7 @@ function buildServiceDescriptorMap(runtimeConfig, options) {
 					localPath: pluginConfig.ui.localPath,
 					port: uiPort,
 					integrity: pluginConfig.ui.integrity,
-					command: "bun",
+					command: "pnpm",
 					args: ["run", "dev"],
 					readyPatterns: PLUGIN_READY_PATTERNS,
 					errorPatterns: PLUGIN_ERROR_PATTERNS,
@@ -188,7 +216,7 @@ function buildServiceDescriptorMapFromPlan(plan, options) {
 	return buildServiceDescriptorMap(plan.runtimeConfig, options);
 }
 function buildDescription(map) {
-	const descriptors = [...map.values()].filter((d) => d.key !== "ui-ssr" && !d.key.startsWith("plugin:"));
+	const descriptors = [...map.values()].filter((d) => !d.key.startsWith("plugin:"));
 	const allLocal = descriptors.every((d) => d.source === "local");
 	const hasProxy = [...map.values()].some((d) => d.proxy && d.source === "local");
 	if (allLocal && !hasProxy) return "Full Local Development";
@@ -202,5 +230,5 @@ function buildDescription(map) {
 }
 
 //#endregion
-export { DevRuntimeConfig, DevRuntimeConfigLive, ServiceDescriptorMap, ServiceDescriptorMapLive, buildDescription, buildServiceDescriptorMap, buildServiceDescriptorMapFromPlan };
+export { DevGeneratedEnv, DevGeneratedEnvLive, DevRuntimeConfig, DevRuntimeConfigLive, ServiceDescriptorMap, ServiceDescriptorMapLive, buildDescription, buildServiceDescriptorMap, buildServiceDescriptorMapFromPlan, isAuthMirrorPluginEntry };
 //# sourceMappingURL=service-descriptor.mjs.map

package/dist/service-descriptor.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"service-descriptor.mjs","names":[],"sources":["../src/service-descriptor.ts"],"sourcesContent":["import { Context, Layer } from \"effect\";\nimport type { JsonObject, RuntimeConfig, SourceMode } from \"./types\";\n\nexport interface ServiceDescriptor {\n  key: string;\n  source: SourceMode;\n  url: string;\n  remoteUrl?: string;\n  entry: string;\n  name: string;\n  localPath?: string;\n  port?: number;\n  readinessPath: string;\n  defaultPort: number;\n  integrity?: string;\n  proxy?: string;\n  variables?: JsonObject;\n  secrets?: string[];\n  ssr?: boolean;\n  command?: string;\n  args?: string[];\n  readyPatterns?: RegExp[];\n  errorPatterns?: RegExp[];\n}\n\nexport class ServiceDescriptorMap extends Context.Tag(\"ServiceDescriptorMap\")<\n  ServiceDescriptorMap,\n  Map<string, ServiceDescriptor>\n>() {}\n\nexport class DevRuntimeConfig extends Context.Tag(\"DevRuntimeConfig\")<\n  DevRuntimeConfig,\n  RuntimeConfig\n>() {}\n\nconst PLUGIN_READY_PATTERNS = [/ready in/i, /compiled.*successfully/i, /listening/i, /started/i];\n\nconst PLUGIN_ERROR_PATTERNS = [/error/i, /failed/i];\n\nconst SERVICE_CONFIGS: Record<\n  string,\n  Pick<\n    ServiceDescriptor,\n    \"command\" | \"args\" | \"readyPatterns\" | \"errorPatterns\" | \"defaultPort\" | \"readinessPath\"\n  >\n> = {\n  host: {\n    command: \"bun\",\n    args: [\"run\", \"dev\"],\n    readyPatterns: [/Host (dev|production) server running at/i, /Server running at/i],\n    errorPatterns: [/error:/i, /failed/i, /exception/i],\n    defaultPort: 3000,\n    readinessPath: \"/health\",\n  },\n  auth: {\n    command: \"bun\",\n    args: [\"run\", \"dev\"],\n    readyPatterns: PLUGIN_READY_PATTERNS,\n    errorPatterns: PLUGIN_ERROR_PATTERNS,\n    defaultPort: 3002,\n    readinessPath: \"/remoteEntry.js\",\n  },\n  ui: {\n    command: \"bun\",\n    args: [\"run\", \"dev\"],\n    readyPatterns: [/\\bready\\s+built in\\b/i, /\\bLocal:\\b/i, /\\bcompiled\\b.*successfully/i],\n    errorPatterns: [/error/i, /failed to compile/i],\n    defaultPort: 3003,\n    readinessPath: \"/remoteEntry.js\",\n  },\n  \"ui-ssr\": {\n    command: \"bun\",\n    args: [\"run\", \"dev:ssr\"],\n    readyPatterns: [/\\bready\\s+built in\\b/i, /\\bcompiled\\b.*successfully/i],\n    errorPatterns: [/error/i, /failed/i],\n    defaultPort: 3004,\n    readinessPath: \"/\",\n  },\n  api: {\n    command: \"bun\",\n    args: [\"run\", \"dev\"],\n    readyPatterns: PLUGIN_READY_PATTERNS,\n    errorPatterns: PLUGIN_ERROR_PATTERNS,\n    defaultPort: 3001,\n    readinessPath: \"/remoteEntry.js\",\n  },\n};\n\nexport function buildServiceDescriptorMap(\n  runtimeConfig: RuntimeConfig,\n  options?: { ssr?: boolean; proxy?: boolean },\n): Map<string, ServiceDescriptor> {\n  const map = new Map<string, ServiceDescriptor>();\n  const ssr = options?.ssr ?? false;\n\n  const hostIsRemote = runtimeConfig.host.source === \"remote\";\n  const hostProbeUrl = hostIsRemote\n    ? (runtimeConfig.host.remoteUrl ?? runtimeConfig.host.url)\n    : runtimeConfig.host.url;\n  map.set(\"host\", {\n    key: \"host\",\n    source: runtimeConfig.host.source,\n    url: hostProbeUrl,\n    remoteUrl: runtimeConfig.host.remoteUrl,\n    entry: hostIsRemote\n      ? hostProbeUrl\n        ? `${hostProbeUrl}/mf-manifest.json`\n        : \"/mf-manifest.json\"\n      : runtimeConfig.host.entry,\n    name: runtimeConfig.host.name,\n    localPath: runtimeConfig.host.localPath,\n    port: runtimeConfig.host.port,\n    integrity: runtimeConfig.host.integrity,\n    secrets: runtimeConfig.host.secrets,\n    ...SERVICE_CONFIGS.host,\n  });\n\n  map.set(\"ui\", {\n    key: \"ui\",\n    source: runtimeConfig.ui.source,\n    url: runtimeConfig.ui.url,\n    remoteUrl: runtimeConfig.ui.source === \"remote\" ? runtimeConfig.ui.url : undefined,\n    entry: runtimeConfig.ui.entry,\n    name: runtimeConfig.ui.name,\n    localPath: runtimeConfig.ui.localPath,\n    port: runtimeConfig.ui.port,\n    integrity: runtimeConfig.ui.integrity,\n    ssr,\n    ...SERVICE_CONFIGS.ui,\n  });\n\n  if (ssr && runtimeConfig.ui.source === \"local\") {\n    map.set(\"ui-ssr\", {\n      key: \"ui-ssr\",\n      source: runtimeConfig.ui.source,\n      url: runtimeConfig.ui.ssrUrl ?? \"\",\n      entry: \"\",\n      name: \"ui-ssr\",\n      localPath: runtimeConfig.ui.localPath,\n      port: runtimeConfig.ui.ssrUrl\n        ? Number.parseInt(new URL(runtimeConfig.ui.ssrUrl).port, 10)\n        : (runtimeConfig.ui.port ?? 3003) + 1,\n      ...SERVICE_CONFIGS[\"ui-ssr\"],\n    });\n  }\n\n  map.set(\"api\", {\n    key: \"api\",\n    source: runtimeConfig.api.source,\n    url: runtimeConfig.api.url,\n    remoteUrl: runtimeConfig.api.source === \"remote\" ? runtimeConfig.api.url : undefined,\n    entry: runtimeConfig.api.entry,\n    name: runtimeConfig.api.name,\n    localPath: runtimeConfig.api.localPath,\n    port: runtimeConfig.api.port,\n    integrity: runtimeConfig.api.integrity,\n    proxy: runtimeConfig.api.proxy,\n    variables: runtimeConfig.api.variables,\n    secrets: runtimeConfig.api.secrets,\n    ...SERVICE_CONFIGS.api,\n  });\n\n  if (runtimeConfig.auth) {\n    map.set(\"auth\", {\n      key: \"auth\",\n      source: runtimeConfig.auth.source,\n      url: runtimeConfig.auth.url,\n      remoteUrl: runtimeConfig.auth.source === \"remote\" ? runtimeConfig.auth.url : undefined,\n      entry: runtimeConfig.auth.entry,\n      name: runtimeConfig.auth.name,\n      localPath: runtimeConfig.auth.localPath,\n      port: runtimeConfig.auth.port,\n      integrity: runtimeConfig.auth.integrity,\n      proxy: runtimeConfig.auth.proxy,\n      variables: runtimeConfig.auth.variables,\n      secrets: runtimeConfig.auth.secrets,\n      ...SERVICE_CONFIGS.auth,\n    });\n  }\n\n  if (runtimeConfig.plugins) {\n    let pluginBasePort = 3010;\n    for (const [pluginId, pluginConfig] of Object.entries(runtimeConfig.plugins)) {\n      const pluginKey = `plugin:${pluginId}`;\n      const resolvedPort = pluginConfig.port ?? pluginBasePort;\n      pluginBasePort = resolvedPort + 1;\n\n      map.set(pluginKey, {\n        key: pluginKey,\n        source: pluginConfig.source,\n        url: pluginConfig.url,\n        remoteUrl: pluginConfig.source === \"remote\" ? pluginConfig.url : undefined,\n        entry: pluginConfig.entry,\n        name: pluginConfig.name,\n        localPath: pluginConfig.localPath,\n        port: resolvedPort,\n        integrity: pluginConfig.integrity,\n        proxy: pluginConfig.proxy,\n        variables: pluginConfig.variables,\n        secrets: pluginConfig.secrets,\n        command: \"bun\",\n        args: [\"run\", \"dev\"],\n        readyPatterns: PLUGIN_READY_PATTERNS,\n        errorPatterns: PLUGIN_ERROR_PATTERNS,\n        defaultPort: resolvedPort,\n        readinessPath: \"/remoteEntry.js\",\n      });\n\n      if (pluginConfig.ui?.localPath && pluginConfig.ui.source === \"local\") {\n        const uiKey = `plugin-ui:${pluginId}`;\n        const uiPort = pluginConfig.ui.port ?? pluginBasePort;\n        pluginBasePort = uiPort + 1;\n\n        map.set(uiKey, {\n          key: uiKey,\n          source: pluginConfig.ui.source,\n          url: pluginConfig.ui.url,\n          entry: pluginConfig.ui.entry,\n          name: pluginConfig.ui.name,\n          localPath: pluginConfig.ui.localPath,\n          port: uiPort,\n          integrity: pluginConfig.ui.integrity,\n          command: \"bun\",\n          args: [\"run\", \"dev\"],\n          readyPatterns: PLUGIN_READY_PATTERNS,\n          errorPatterns: PLUGIN_ERROR_PATTERNS,\n          defaultPort: uiPort,\n          readinessPath: \"/remoteEntry.js\",\n        });\n      }\n    }\n  }\n\n  return map;\n}\n\nexport interface AppOrchestrator {\n  packages: string[];\n  description: string;\n  env: Record<string, string>;\n  port?: number;\n  interactive?: boolean;\n  noLogs?: boolean;\n}\n\nexport const ServiceDescriptorMapLive = (map: Map<string, ServiceDescriptor>) =>\n  Layer.succeed(ServiceDescriptorMap, map);\n\nexport const DevRuntimeConfigLive = (config: RuntimeConfig) =>\n  Layer.succeed(DevRuntimeConfig, config);\n\nexport function buildServiceDescriptorMapFromPlan(\n  plan: {\n    runtimeConfig: RuntimeConfig;\n    resolvedPorts: { host?: number; api?: number; auth?: number; ui?: number; uiSsr?: number };\n  },\n  options?: { ssr?: boolean; proxy?: boolean },\n): Map<string, ServiceDescriptor> {\n  return buildServiceDescriptorMap(plan.runtimeConfig, options);\n}\n\ninterface ServiceDescriptorInfo {\n  key: string;\n  source: string;\n  proxy?: string;\n}\n\nexport function buildDescription(map: Map<string, ServiceDescriptorInfo>): string {\n  const descriptors = [...map.values()].filter(\n    (d) => d.key !== \"ui-ssr\" && !d.key.startsWith(\"plugin:\"),\n  );\n\n  const allLocal = descriptors.every((d) => d.source === \"local\");\n  const hasProxy = [...map.values()].some((d) => d.proxy && d.source === \"local\");\n  if (allLocal && !hasProxy) return \"Full Local Development\";\n\n  const parts: string[] = [];\n  for (const d of descriptors) {\n    if (d.source === \"remote\") {\n      const label =\n        d.key === \"host\"\n          ? \"Remote Host\"\n          : d.key === \"ui\"\n            ? \"Remote UI\"\n            : d.key === \"api\"\n              ? hasProxy\n                ? undefined\n                : \"Remote API\"\n              : d.key === \"auth\"\n                ? \"Remote Auth\"\n                : undefined;\n      if (label) parts.push(label);\n    }\n  }\n  if (hasProxy) parts.push(\"Proxy API → Production\");\n  return parts.join(\" + \") || \"Remote Mode\";\n}\n"],"mappings":";;;AAyBA,IAAa,uBAAb,cAA0C,QAAQ,IAAI,sBAAsB,CAAC,CAG3E,CAAC,CAAC,CAAC;AAEL,IAAa,mBAAb,cAAsC,QAAQ,IAAI,kBAAkB,CAAC,CAGnE,CAAC,CAAC,CAAC;AAEL,MAAM,wBAAwB;CAAC;CAAa;CAA2B;CAAc;AAAU;AAE/F,MAAM,wBAAwB,CAAC,UAAU,SAAS;AAElD,MAAM,kBAMF;CACF,MAAM;EACJ,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EACnB,eAAe,CAAC,4CAA4C,oBAAoB;EAChF,eAAe;GAAC;GAAW;GAAW;EAAY;EAClD,aAAa;EACb,eAAe;CACjB;CACA,MAAM;EACJ,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EACnB,eAAe;EACf,eAAe;EACf,aAAa;EACb,eAAe;CACjB;CACA,IAAI;EACF,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EACnB,eAAe;GAAC;GAAyB;GAAe;EAA6B;EACrF,eAAe,CAAC,UAAU,oBAAoB;EAC9C,aAAa;EACb,eAAe;CACjB;CACA,UAAU;EACR,SAAS;EACT,MAAM,CAAC,OAAO,SAAS;EACvB,eAAe,CAAC,yBAAyB,6BAA6B;EACtE,eAAe,CAAC,UAAU,SAAS;EACnC,aAAa;EACb,eAAe;CACjB;CACA,KAAK;EACH,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EACnB,eAAe;EACf,eAAe;EACf,aAAa;EACb,eAAe;CACjB;AACF;AAEA,SAAgB,0BACd,eACA,SACgC;CAChC,MAAM,sBAAM,IAAI,IAA+B;CAC/C,MAAM,MAAM,SAAS,OAAO;CAE5B,MAAM,eAAe,cAAc,KAAK,WAAW;CACnD,MAAM,eAAe,eAChB,cAAc,KAAK,aAAa,cAAc,KAAK,MACpD,cAAc,KAAK;CACvB,IAAI,IAAI,QAAQ;EACd,KAAK;EACL,QAAQ,cAAc,KAAK;EAC3B,KAAK;EACL,WAAW,cAAc,KAAK;EAC9B,OAAO,eACH,eACE,GAAG,aAAa,qBAChB,sBACF,cAAc,KAAK;EACvB,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,SAAS,cAAc,KAAK;EAC5B,GAAG,gBAAgB;CACrB,CAAC;CAED,IAAI,IAAI,MAAM;EACZ,KAAK;EACL,QAAQ,cAAc,GAAG;EACzB,KAAK,cAAc,GAAG;EACtB,WAAW,cAAc,GAAG,WAAW,WAAW,cAAc,GAAG,MAAM;EACzE,OAAO,cAAc,GAAG;EACxB,MAAM,cAAc,GAAG;EACvB,WAAW,cAAc,GAAG;EAC5B,MAAM,cAAc,GAAG;EACvB,WAAW,cAAc,GAAG;EAC5B;EACA,GAAG,gBAAgB;CACrB,CAAC;CAED,IAAI,OAAO,cAAc,GAAG,WAAW,SACrC,IAAI,IAAI,UAAU;EAChB,KAAK;EACL,QAAQ,cAAc,GAAG;EACzB,KAAK,cAAc,GAAG,UAAU;EAChC,OAAO;EACP,MAAM;EACN,WAAW,cAAc,GAAG;EAC5B,MAAM,cAAc,GAAG,SACnB,OAAO,SAAS,IAAI,IAAI,cAAc,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,KACxD,cAAc,GAAG,QAAQ,QAAQ;EACtC,GAAG,gBAAgB;CACrB,CAAC;CAGH,IAAI,IAAI,OAAO;EACb,KAAK;EACL,QAAQ,cAAc,IAAI;EAC1B,KAAK,cAAc,IAAI;EACvB,WAAW,cAAc,IAAI,WAAW,WAAW,cAAc,IAAI,MAAM;EAC3E,OAAO,cAAc,IAAI;EACzB,MAAM,cAAc,IAAI;EACxB,WAAW,cAAc,IAAI;EAC7B,MAAM,cAAc,IAAI;EACxB,WAAW,cAAc,IAAI;EAC7B,OAAO,cAAc,IAAI;EACzB,WAAW,cAAc,IAAI;EAC7B,SAAS,cAAc,IAAI;EAC3B,GAAG,gBAAgB;CACrB,CAAC;CAED,IAAI,cAAc,MAChB,IAAI,IAAI,QAAQ;EACd,KAAK;EACL,QAAQ,cAAc,KAAK;EAC3B,KAAK,cAAc,KAAK;EACxB,WAAW,cAAc,KAAK,WAAW,WAAW,cAAc,KAAK,MAAM;EAC7E,OAAO,cAAc,KAAK;EAC1B,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,OAAO,cAAc,KAAK;EAC1B,WAAW,cAAc,KAAK;EAC9B,SAAS,cAAc,KAAK;EAC5B,GAAG,gBAAgB;CACrB,CAAC;CAGH,IAAI,cAAc,SAAS;EACzB,IAAI,iBAAiB;EACrB,KAAK,MAAM,CAAC,UAAU,iBAAiB,OAAO,QAAQ,cAAc,OAAO,GAAG;GAC5E,MAAM,YAAY,UAAU;GAC5B,MAAM,eAAe,aAAa,QAAQ;GAC1C,iBAAiB,eAAe;GAEhC,IAAI,IAAI,WAAW;IACjB,KAAK;IACL,QAAQ,aAAa;IACrB,KAAK,aAAa;IAClB,WAAW,aAAa,WAAW,WAAW,aAAa,MAAM;IACjE,OAAO,aAAa;IACpB,MAAM,aAAa;IACnB,WAAW,aAAa;IACxB,MAAM;IACN,WAAW,aAAa;IACxB,OAAO,aAAa;IACpB,WAAW,aAAa;IACxB,SAAS,aAAa;IACtB,SAAS;IACT,MAAM,CAAC,OAAO,KAAK;IACnB,eAAe;IACf,eAAe;IACf,aAAa;IACb,eAAe;GACjB,CAAC;GAED,IAAI,aAAa,IAAI,aAAa,aAAa,GAAG,WAAW,SAAS;IACpE,MAAM,QAAQ,aAAa;IAC3B,MAAM,SAAS,aAAa,GAAG,QAAQ;IACvC,iBAAiB,SAAS;IAE1B,IAAI,IAAI,OAAO;KACb,KAAK;KACL,QAAQ,aAAa,GAAG;KACxB,KAAK,aAAa,GAAG;KACrB,OAAO,aAAa,GAAG;KACvB,MAAM,aAAa,GAAG;KACtB,WAAW,aAAa,GAAG;KAC3B,MAAM;KACN,WAAW,aAAa,GAAG;KAC3B,SAAS;KACT,MAAM,CAAC,OAAO,KAAK;KACnB,eAAe;KACf,eAAe;KACf,aAAa;KACb,eAAe;IACjB,CAAC;GACH;EACF;CACF;CAEA,OAAO;AACT;AAWA,MAAa,4BAA4B,QACvC,MAAM,QAAQ,sBAAsB,GAAG;AAEzC,MAAa,wBAAwB,WACnC,MAAM,QAAQ,kBAAkB,MAAM;AAExC,SAAgB,kCACd,MAIA,SACgC;CAChC,OAAO,0BAA0B,KAAK,eAAe,OAAO;AAC9D;AAQA,SAAgB,iBAAiB,KAAiD;CAChF,MAAM,cAAc,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,QACnC,MAAM,EAAE,QAAQ,YAAY,CAAC,EAAE,IAAI,WAAW,SAAS,CAC1D;CAEA,MAAM,WAAW,YAAY,OAAO,MAAM,EAAE,WAAW,OAAO;CAC9D,MAAM,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,SAAS,EAAE,WAAW,OAAO;CAC9E,IAAI,YAAY,CAAC,UAAU,OAAO;CAElC,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,KAAK,aACd,IAAI,EAAE,WAAW,UAAU;EACzB,MAAM,QACJ,EAAE,QAAQ,SACN,gBACA,EAAE,QAAQ,OACR,cACA,EAAE,QAAQ,QACR,WACE,SACA,eACF,EAAE,QAAQ,SACR,gBACA;EACZ,IAAI,OAAO,MAAM,KAAK,KAAK;CAC7B;CAEF,IAAI,UAAU,MAAM,KAAK,wBAAwB;CACjD,OAAO,MAAM,KAAK,KAAK,KAAK;AAC9B"}
+{"version":3,"file":"service-descriptor.mjs","names":[],"sources":["../src/service-descriptor.ts"],"sourcesContent":["import { existsSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { Context, Layer } from \"effect\";\nimport type { JsonObject, RuntimeConfig, SourceMode } from \"./types\";\n\nexport interface AuthSlotShape {\n  source: string;\n  localPath?: string;\n  url?: string;\n}\n\n/**\n * True when a `plugins.<id>` entry is the runtime-config mirror of the\n * app-slot auth plugin (same backend target) — the `auth` service already\n * spawns that backend, so the mirror contributes only its `ui` surface.\n * The single implementation; consumed by the service descriptors, the DAG,\n * the infra planner, and the dev session.\n */\nexport function isAuthMirrorPluginEntry(\n  authEntry: AuthSlotShape | undefined,\n  pluginId: string,\n  pluginConfig: AuthSlotShape,\n): boolean {\n  if (pluginId !== \"auth\" || !authEntry) return false;\n  if (pluginConfig === authEntry) return true;\n  if (pluginConfig.localPath && pluginConfig.localPath === authEntry.localPath) return true;\n  if (\n    !pluginConfig.localPath &&\n    pluginConfig.source === \"remote\" &&\n    pluginConfig.url &&\n    pluginConfig.url === authEntry.url\n  ) {\n    return true;\n  }\n  return false;\n}\n\nexport interface ServiceDescriptor {\n  key: string;\n  source: SourceMode;\n  url: string;\n  remoteUrl?: string;\n  entry: string;\n  name: string;\n  localPath?: string;\n  port?: number;\n  readinessPath: string;\n  defaultPort: number;\n  integrity?: string;\n  proxy?: string;\n  variables?: JsonObject;\n  secrets?: string[];\n  ssr?: boolean;\n  command?: string;\n  args?: string[];\n  env?: Record<string, string>;\n  readyPatterns?: RegExp[];\n  errorPatterns?: RegExp[];\n  /** folder-form plugin UI port — the UI build is a child of this dev process (BOS_UI_PORT) */\n  uiPort?: number;\n}\n\nexport class ServiceDescriptorMap extends Context.Service<\n  ServiceDescriptorMap,\n  Map<string, ServiceDescriptor>\n>()(\"ServiceDescriptorMap\") {}\n\nexport class DevRuntimeConfig extends Context.Service<DevRuntimeConfig, RuntimeConfig>()(\n  \"DevRuntimeConfig\",\n) {}\n\nexport class DevGeneratedEnv extends Context.Service<DevGeneratedEnv, Record<string, string>>()(\n  \"DevGeneratedEnv\",\n) {}\n\nexport const DevGeneratedEnvLive = (env: Record<string, string>) =>\n  Layer.succeed(DevGeneratedEnv, env);\n\nconst PLUGIN_READY_PATTERNS = [/ready in/i, /compiled.*successfully/i, /listening/i, /started/i];\n\nconst PLUGIN_ERROR_PATTERNS = [\n  /\\bERROR in\\b/,\n  /failed to compile/i,\n  /Module not found/i,\n  /Cannot find module/i,\n];\n\nconst SERVICE_CONFIGS = {\n  host: {\n    command: \"pnpm\",\n    args: [\"run\", \"dev\"],\n    // The host dev server runs on tsx (TS-capable node), so it can consume\n    // framework package sources directly — NODE_OPTIONS makes node's\n    // resolver pick the `development` export condition. The env var rides\n    // the spawn environment (ADR 0026 §2) and is inherited by the host's\n    // tsx children. rsbuild/rspack config loaders must NOT rely on it:\n    // their .mjs config evaluation resolves dist (freshness is the\n    // prerequisite train's job, ADR 0022).\n    env: { NODE_OPTIONS: \"--conditions=development\" },\n    readyPatterns: [/Host (dev|production) server running at/i, /Server running at/i],\n    errorPatterns: [/\\berror\\b(?!s)/i, /\\bfailed to\\b/i, /\\bbuild failed\\b/i, /exception/i],\n    defaultPort: 3000,\n    readinessPath: \"/health\",\n  },\n  auth: {\n    command: \"pnpm\",\n    args: [\"run\", \"dev\"],\n    readyPatterns: PLUGIN_READY_PATTERNS,\n    errorPatterns: PLUGIN_ERROR_PATTERNS,\n    defaultPort: 3002,\n    readinessPath: \"/remoteEntry.js\",\n  },\n  ui: {\n    command: \"pnpm\",\n    args: [\"run\", \"dev\"],\n    readyPatterns: [/\\bready\\s+built in\\b/i, /\\bLocal:\\b/i, /\\bcompiled\\b.*successfully/i],\n    errorPatterns: [/\\berror\\b(?!s)/i, /\\bfailed to\\b/i, /\\bbuild failed\\b/i],\n    defaultPort: 3003,\n    readinessPath: \"/remoteEntry.js\",\n  },\n  api: {\n    command: \"pnpm\",\n    args: [\"run\", \"dev\"],\n    readyPatterns: PLUGIN_READY_PATTERNS,\n    errorPatterns: PLUGIN_ERROR_PATTERNS,\n    defaultPort: 3001,\n    readinessPath: \"/remoteEntry.js\",\n  },\n} as const satisfies Record<\n  string,\n  Pick<\n    ServiceDescriptor,\n    \"command\" | \"args\" | \"env\" | \"readyPatterns\" | \"errorPatterns\" | \"defaultPort\" | \"readinessPath\"\n  >\n>;\n\nexport function buildServiceDescriptorMap(\n  runtimeConfig: RuntimeConfig,\n  options?: { ssr?: boolean; proxy?: boolean },\n): Map<string, ServiceDescriptor> {\n  const map = new Map<string, ServiceDescriptor>();\n  const ssr = options?.ssr ?? false;\n\n  const hostIsRemote = runtimeConfig.host.source === \"remote\";\n  const hostProbeUrl = hostIsRemote\n    ? (runtimeConfig.host.remoteUrl ?? runtimeConfig.host.url)\n    : runtimeConfig.host.url;\n  map.set(\"host\", {\n    key: \"host\",\n    source: runtimeConfig.host.source,\n    url: hostProbeUrl,\n    remoteUrl: runtimeConfig.host.remoteUrl,\n    entry: hostIsRemote\n      ? hostProbeUrl\n        ? `${hostProbeUrl}/mf-manifest.json`\n        : \"/mf-manifest.json\"\n      : runtimeConfig.host.entry,\n    name: runtimeConfig.host.name,\n    localPath: runtimeConfig.host.localPath,\n    port: runtimeConfig.host.port,\n    integrity: runtimeConfig.host.integrity,\n    secrets: runtimeConfig.host.secrets,\n    ...SERVICE_CONFIGS.host,\n  });\n\n  map.set(\"ui\", {\n    key: \"ui\",\n    source: runtimeConfig.ui.source,\n    url: runtimeConfig.ui.url,\n    remoteUrl: runtimeConfig.ui.source === \"remote\" ? runtimeConfig.ui.url : undefined,\n    entry: runtimeConfig.ui.entry,\n    name: runtimeConfig.ui.name,\n    localPath: runtimeConfig.ui.localPath,\n    port: runtimeConfig.ui.port,\n    integrity: runtimeConfig.ui.integrity,\n    ssr,\n    ...SERVICE_CONFIGS.ui,\n    env: { BOS_DEV_SERVER: \"1\" },\n    // BOS_NO_WATCH stacks (regression/CI) build once and serve the built dist\n    // via rsbuild preview — no watcher, no HMR.\n    args: process.env.BOS_NO_WATCH === \"1\" ? [\"run\", \"dev:built\"] : SERVICE_CONFIGS.ui.args,\n  });\n\n  map.set(\"api\", {\n    key: \"api\",\n    source: runtimeConfig.api.source,\n    url: runtimeConfig.api.url,\n    remoteUrl: runtimeConfig.api.source === \"remote\" ? runtimeConfig.api.url : undefined,\n    entry: runtimeConfig.api.entry,\n    name: runtimeConfig.api.name,\n    localPath: runtimeConfig.api.localPath,\n    port: runtimeConfig.api.port,\n    integrity: runtimeConfig.api.integrity,\n    proxy: runtimeConfig.api.proxy,\n    variables: runtimeConfig.api.variables,\n    secrets: runtimeConfig.api.secrets,\n    ...SERVICE_CONFIGS.api,\n  });\n\n  if (runtimeConfig.auth) {\n    map.set(\"auth\", {\n      key: \"auth\",\n      source: runtimeConfig.auth.source,\n      url: runtimeConfig.auth.url,\n      remoteUrl: runtimeConfig.auth.source === \"remote\" ? runtimeConfig.auth.url : undefined,\n      entry: runtimeConfig.auth.entry,\n      name: runtimeConfig.auth.name,\n      localPath: runtimeConfig.auth.localPath,\n      port: runtimeConfig.auth.port,\n      integrity: runtimeConfig.auth.integrity,\n      proxy: runtimeConfig.auth.proxy,\n      variables: runtimeConfig.auth.variables,\n      secrets: runtimeConfig.auth.secrets,\n      ...SERVICE_CONFIGS.auth,\n    });\n  }\n\n  if (runtimeConfig.plugins) {\n    let pluginBasePort = 3010;\n    for (const [pluginId, pluginConfig] of Object.entries(runtimeConfig.plugins)) {\n      const isAuthMirror = isAuthMirrorPluginEntry(runtimeConfig.auth, pluginId, pluginConfig);\n      const pluginKey = `plugin:${pluginId}`;\n      const resolvedPort = pluginConfig.port ?? pluginBasePort;\n      pluginBasePort = resolvedPort + 1;\n\n      // Folder-form ui source: the ui dir lives inside the plugin workspace\n      // (no own package.json) — `every-plugin dev` spawns its UI build as a\n      // child (BOS_UI_PORT), so no separate plugin-ui service is spawned.\n      const uiLocalPath = pluginConfig.ui?.localPath;\n      const isFolderFormUi = Boolean(\n        uiLocalPath &&\n          pluginConfig.ui?.source === \"local\" &&\n          existsSync(path.join(uiLocalPath, \"src\", \"routes\")) &&\n          !existsSync(path.join(uiLocalPath, \"package.json\")),\n      );\n      const folderUiPort = pluginConfig.ui?.port ?? pluginBasePort;\n      if (isFolderFormUi) pluginBasePort = folderUiPort + 1;\n\n      if (!isAuthMirror) {\n        map.set(pluginKey, {\n          key: pluginKey,\n          source: pluginConfig.source,\n          url: pluginConfig.url,\n          remoteUrl: pluginConfig.source === \"remote\" ? pluginConfig.url : undefined,\n          entry: pluginConfig.entry,\n          name: pluginConfig.name,\n          localPath: pluginConfig.localPath,\n          port: resolvedPort,\n          integrity: pluginConfig.integrity,\n          proxy: pluginConfig.proxy,\n          variables: pluginConfig.variables,\n          secrets: pluginConfig.secrets,\n          command: \"pnpm\",\n          args: [\"run\", \"dev\"],\n          env: isFolderFormUi ? { BOS_UI_PORT: String(folderUiPort) } : undefined,\n          uiPort: isFolderFormUi ? folderUiPort : undefined,\n          readyPatterns: PLUGIN_READY_PATTERNS,\n          errorPatterns: PLUGIN_ERROR_PATTERNS,\n          defaultPort: resolvedPort,\n          readinessPath: \"/remoteEntry.js\",\n        });\n      } else if (isFolderFormUi) {\n        // Folder-form ui for the auth mirror: the `auth` app slot owns the\n        // dev process (plugin:auth is not spawned), so BOS_UI_PORT rides on\n        // the auth descriptor. folderUiPort is the same port the runtime\n        // config wired into the mirror's ui.url (withLocalRuntimeUrl).\n        const authDescriptor = map.get(\"auth\");\n        if (authDescriptor) {\n          map.set(\"auth\", {\n            ...authDescriptor,\n            env: { BOS_UI_PORT: String(folderUiPort) },\n            uiPort: folderUiPort,\n          });\n        }\n      }\n\n      if (pluginConfig.ui?.localPath && pluginConfig.ui.source === \"local\" && !isFolderFormUi) {\n        const uiKey = `plugin-ui:${pluginId}`;\n        const uiPort = pluginConfig.ui.port ?? pluginBasePort;\n        pluginBasePort = uiPort + 1;\n\n        map.set(uiKey, {\n          key: uiKey,\n          source: pluginConfig.ui.source,\n          url: pluginConfig.ui.url,\n          entry: pluginConfig.ui.entry,\n          name: pluginConfig.ui.name,\n          localPath: pluginConfig.ui.localPath,\n          port: uiPort,\n          integrity: pluginConfig.ui.integrity,\n          command: \"pnpm\",\n          args: [\"run\", \"dev\"],\n          readyPatterns: PLUGIN_READY_PATTERNS,\n          errorPatterns: PLUGIN_ERROR_PATTERNS,\n          defaultPort: uiPort,\n          readinessPath: \"/remoteEntry.js\",\n        });\n      }\n    }\n  }\n\n  return map;\n}\n\nexport interface AppOrchestrator {\n  packages: string[];\n  description: string;\n  env: Record<string, string>;\n  port?: number;\n  interactive?: boolean;\n  noLogs?: boolean;\n}\n\nexport const ServiceDescriptorMapLive = (map: Map<string, ServiceDescriptor>) =>\n  Layer.succeed(ServiceDescriptorMap, map);\n\nexport const DevRuntimeConfigLive = (config: RuntimeConfig) =>\n  Layer.succeed(DevRuntimeConfig, config);\n\nexport function buildServiceDescriptorMapFromPlan(\n  plan: {\n    runtimeConfig: RuntimeConfig;\n    resolvedPorts: { host?: number; api?: number; auth?: number; ui?: number; uiSsr?: number };\n  },\n  options?: { ssr?: boolean; proxy?: boolean },\n): Map<string, ServiceDescriptor> {\n  return buildServiceDescriptorMap(plan.runtimeConfig, options);\n}\n\ninterface ServiceDescriptorInfo {\n  key: string;\n  source: string;\n  proxy?: string;\n}\n\nexport function buildDescription(map: Map<string, ServiceDescriptorInfo>): string {\n  const descriptors = [...map.values()].filter((d) => !d.key.startsWith(\"plugin:\"));\n\n  const allLocal = descriptors.every((d) => d.source === \"local\");\n  const hasProxy = [...map.values()].some((d) => d.proxy && d.source === \"local\");\n  if (allLocal && !hasProxy) return \"Full Local Development\";\n\n  const parts: string[] = [];\n  for (const d of descriptors) {\n    if (d.source === \"remote\") {\n      const label =\n        d.key === \"host\"\n          ? \"Remote Host\"\n          : d.key === \"ui\"\n            ? \"Remote UI\"\n            : d.key === \"api\"\n              ? hasProxy\n                ? undefined\n                : \"Remote API\"\n              : d.key === \"auth\"\n                ? \"Remote Auth\"\n                : undefined;\n      if (label) parts.push(label);\n    }\n  }\n  if (hasProxy) parts.push(\"Proxy API → Production\");\n  return parts.join(\" + \") || \"Remote Mode\";\n}\n"],"mappings":";;;;;;;;;;;;AAkBA,SAAgB,wBACd,WACA,UACA,cACS;CACT,IAAI,aAAa,UAAU,CAAC,WAAW,OAAO;CAC9C,IAAI,iBAAiB,WAAW,OAAO;CACvC,IAAI,aAAa,aAAa,aAAa,cAAc,UAAU,WAAW,OAAO;CACrF,IACE,CAAC,aAAa,aACd,aAAa,WAAW,YACxB,aAAa,OACb,aAAa,QAAQ,UAAU,KAE/B,OAAO;CAET,OAAO;AACT;AA2BA,IAAa,uBAAb,cAA0C,QAAQ,QAGhD,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAE7B,IAAa,mBAAb,cAAsC,QAAQ,QAAyC,CAAC,CACtF,kBACF,CAAC,CAAC,CAAC;AAEH,IAAa,kBAAb,cAAqC,QAAQ,QAAiD,CAAC,CAC7F,iBACF,CAAC,CAAC,CAAC;AAEH,MAAa,uBAAuB,QAClC,MAAM,QAAQ,iBAAiB,GAAG;AAEpC,MAAM,wBAAwB;CAAC;CAAa;CAA2B;CAAc;AAAU;AAE/F,MAAM,wBAAwB;CAC5B;CACA;CACA;CACA;AACF;AAEA,MAAM,kBAAkB;CACtB,MAAM;EACJ,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EAQnB,KAAK,EAAE,cAAc,2BAA2B;EAChD,eAAe,CAAC,4CAA4C,oBAAoB;EAChF,eAAe;GAAC;GAAmB;GAAkB;GAAqB;EAAY;EACtF,aAAa;EACb,eAAe;CACjB;CACA,MAAM;EACJ,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EACnB,eAAe;EACf,eAAe;EACf,aAAa;EACb,eAAe;CACjB;CACA,IAAI;EACF,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EACnB,eAAe;GAAC;GAAyB;GAAe;EAA6B;EACrF,eAAe;GAAC;GAAmB;GAAkB;EAAmB;EACxE,aAAa;EACb,eAAe;CACjB;CACA,KAAK;EACH,SAAS;EACT,MAAM,CAAC,OAAO,KAAK;EACnB,eAAe;EACf,eAAe;EACf,aAAa;EACb,eAAe;CACjB;AACF;AAQA,SAAgB,0BACd,eACA,SACgC;CAChC,MAAM,sBAAM,IAAI,IAA+B;CAC/C,MAAM,MAAM,SAAS,OAAO;CAE5B,MAAM,eAAe,cAAc,KAAK,WAAW;CACnD,MAAM,eAAe,eAChB,cAAc,KAAK,aAAa,cAAc,KAAK,MACpD,cAAc,KAAK;CACvB,IAAI,IAAI,QAAQ;EACd,KAAK;EACL,QAAQ,cAAc,KAAK;EAC3B,KAAK;EACL,WAAW,cAAc,KAAK;EAC9B,OAAO,eACH,eACE,GAAG,aAAa,qBAChB,sBACF,cAAc,KAAK;EACvB,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,SAAS,cAAc,KAAK;EAC5B,GAAG,gBAAgB;CACrB,CAAC;CAED,IAAI,IAAI,MAAM;EACZ,KAAK;EACL,QAAQ,cAAc,GAAG;EACzB,KAAK,cAAc,GAAG;EACtB,WAAW,cAAc,GAAG,WAAW,WAAW,cAAc,GAAG,MAAM;EACzE,OAAO,cAAc,GAAG;EACxB,MAAM,cAAc,GAAG;EACvB,WAAW,cAAc,GAAG;EAC5B,MAAM,cAAc,GAAG;EACvB,WAAW,cAAc,GAAG;EAC5B;EACA,GAAG,gBAAgB;EACnB,KAAK,EAAE,gBAAgB,IAAI;EAG3B,MAAM,QAAQ,IAAI,iBAAiB,MAAM,CAAC,OAAO,WAAW,IAAI,gBAAgB,GAAG;CACrF,CAAC;CAED,IAAI,IAAI,OAAO;EACb,KAAK;EACL,QAAQ,cAAc,IAAI;EAC1B,KAAK,cAAc,IAAI;EACvB,WAAW,cAAc,IAAI,WAAW,WAAW,cAAc,IAAI,MAAM;EAC3E,OAAO,cAAc,IAAI;EACzB,MAAM,cAAc,IAAI;EACxB,WAAW,cAAc,IAAI;EAC7B,MAAM,cAAc,IAAI;EACxB,WAAW,cAAc,IAAI;EAC7B,OAAO,cAAc,IAAI;EACzB,WAAW,cAAc,IAAI;EAC7B,SAAS,cAAc,IAAI;EAC3B,GAAG,gBAAgB;CACrB,CAAC;CAED,IAAI,cAAc,MAChB,IAAI,IAAI,QAAQ;EACd,KAAK;EACL,QAAQ,cAAc,KAAK;EAC3B,KAAK,cAAc,KAAK;EACxB,WAAW,cAAc,KAAK,WAAW,WAAW,cAAc,KAAK,MAAM;EAC7E,OAAO,cAAc,KAAK;EAC1B,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,MAAM,cAAc,KAAK;EACzB,WAAW,cAAc,KAAK;EAC9B,OAAO,cAAc,KAAK;EAC1B,WAAW,cAAc,KAAK;EAC9B,SAAS,cAAc,KAAK;EAC5B,GAAG,gBAAgB;CACrB,CAAC;CAGH,IAAI,cAAc,SAAS;EACzB,IAAI,iBAAiB;EACrB,KAAK,MAAM,CAAC,UAAU,iBAAiB,OAAO,QAAQ,cAAc,OAAO,GAAG;GAC5E,MAAM,eAAe,wBAAwB,cAAc,MAAM,UAAU,YAAY;GACvF,MAAM,YAAY,UAAU;GAC5B,MAAM,eAAe,aAAa,QAAQ;GAC1C,iBAAiB,eAAe;GAKhC,MAAM,cAAc,aAAa,IAAI;GACrC,MAAM,iBAAiB,QACrB,eACE,aAAa,IAAI,WAAW,WAC5B,WAAW,KAAK,KAAK,aAAa,OAAO,QAAQ,CAAC,KAClD,CAAC,WAAW,KAAK,KAAK,aAAa,cAAc,CAAC,CACtD;GACA,MAAM,eAAe,aAAa,IAAI,QAAQ;GAC9C,IAAI,gBAAgB,iBAAiB,eAAe;GAEpD,IAAI,CAAC,cACH,IAAI,IAAI,WAAW;IACjB,KAAK;IACL,QAAQ,aAAa;IACrB,KAAK,aAAa;IAClB,WAAW,aAAa,WAAW,WAAW,aAAa,MAAM;IACjE,OAAO,aAAa;IACpB,MAAM,aAAa;IACnB,WAAW,aAAa;IACxB,MAAM;IACN,WAAW,aAAa;IACxB,OAAO,aAAa;IACpB,WAAW,aAAa;IACxB,SAAS,aAAa;IACtB,SAAS;IACT,MAAM,CAAC,OAAO,KAAK;IACnB,KAAK,iBAAiB,EAAE,aAAa,OAAO,YAAY,EAAE,IAAI;IAC9D,QAAQ,iBAAiB,eAAe;IACxC,eAAe;IACf,eAAe;IACf,aAAa;IACb,eAAe;GACjB,CAAC;QACI,IAAI,gBAAgB;IAKzB,MAAM,iBAAiB,IAAI,IAAI,MAAM;IACrC,IAAI,gBACF,IAAI,IAAI,QAAQ;KACd,GAAG;KACH,KAAK,EAAE,aAAa,OAAO,YAAY,EAAE;KACzC,QAAQ;IACV,CAAC;GAEL;GAEA,IAAI,aAAa,IAAI,aAAa,aAAa,GAAG,WAAW,WAAW,CAAC,gBAAgB;IACvF,MAAM,QAAQ,aAAa;IAC3B,MAAM,SAAS,aAAa,GAAG,QAAQ;IACvC,iBAAiB,SAAS;IAE1B,IAAI,IAAI,OAAO;KACb,KAAK;KACL,QAAQ,aAAa,GAAG;KACxB,KAAK,aAAa,GAAG;KACrB,OAAO,aAAa,GAAG;KACvB,MAAM,aAAa,GAAG;KACtB,WAAW,aAAa,GAAG;KAC3B,MAAM;KACN,WAAW,aAAa,GAAG;KAC3B,SAAS;KACT,MAAM,CAAC,OAAO,KAAK;KACnB,eAAe;KACf,eAAe;KACf,aAAa;KACb,eAAe;IACjB,CAAC;GACH;EACF;CACF;CAEA,OAAO;AACT;AAWA,MAAa,4BAA4B,QACvC,MAAM,QAAQ,sBAAsB,GAAG;AAEzC,MAAa,wBAAwB,WACnC,MAAM,QAAQ,kBAAkB,MAAM;AAExC,SAAgB,kCACd,MAIA,SACgC;CAChC,OAAO,0BAA0B,KAAK,eAAe,OAAO;AAC9D;AAQA,SAAgB,iBAAiB,KAAiD;CAChF,MAAM,cAAc,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,EAAE,IAAI,WAAW,SAAS,CAAC;CAEhF,MAAM,WAAW,YAAY,OAAO,MAAM,EAAE,WAAW,OAAO;CAC9D,MAAM,WAAW,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,SAAS,EAAE,WAAW,OAAO;CAC9E,IAAI,YAAY,CAAC,UAAU,OAAO;CAElC,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,KAAK,aACd,IAAI,EAAE,WAAW,UAAU;EACzB,MAAM,QACJ,EAAE,QAAQ,SACN,gBACA,EAAE,QAAQ,OACR,cACA,EAAE,QAAQ,QACR,WACE,SACA,eACF,EAAE,QAAQ,SACR,gBACA;EACZ,IAAI,OAAO,MAAM,KAAK,KAAK;CAC7B;CAEF,IAAI,UAAU,MAAM,KAAK,wBAAwB;CACjD,OAAO,MAAM,KAAK,KAAK,KAAK;AAC9B"}

package/dist/shared-deps.cjs

@@ -1,10 +1,19 @@
 const require_merge = require('./merge.cjs');
 const require_types = require('./types.cjs');
+const require_config = require('./config.cjs');
+const require_workspace_catalog = require('./workspace-catalog.cjs');
+const require_workspace = require('./workspace.cjs');
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 let node_crypto = require("node:crypto");
 
 //#region src/shared-deps.ts
+async function loadBosConfigForSharedDeps(configDir, bosConfigPath) {
+	const appDescriptorPath = (0, node_path.join)(configDir, "bos.app.ts");
+	if ((0, node_fs.existsSync)(appDescriptorPath)) return require_config.loadAppDescriptorConfig(appDescriptorPath);
+	if ((0, node_fs.existsSync)(bosConfigPath)) return JSON.parse((0, node_fs.readFileSync)(bosConfigPath, "utf-8"));
+	return JSON.parse((0, node_fs.readFileSync)(bosConfigPath, "utf-8"));
+}
 function sha256(input) {
 	return (0, node_crypto.createHash)("sha256").update(input).digest("hex");
 }
@@ -98,16 +107,15 @@ function collectSharedDepRefs(bosConfig) {
 async function syncResolvedSharedDeps(opts) {
 	const bosConfigPath = (0, node_path.join)(opts.configDir, "bos.config.json");
 	const resolvedConfigPath = (0, node_path.join)(opts.configDir, ".bos", "bos.resolved-config.json");
-	const packageJsonPath = (0, node_path.join)(opts.configDir, "package.json");
+	const workspaceRoot = require_workspace.findWorkspaceRoot(opts.configDir)?.dir ?? opts.configDir;
 	const generatedPath = (0, node_path.join)(opts.configDir, ".bos", "generated", "shared-deps.json");
-	const bosConfig = opts.bosConfig ?? JSON.parse((0, node_fs.readFileSync)(bosConfigPath, "utf-8"));
-	if (!require_merge.isPlainObject(bosConfig)) throw new Error("bos.config.json must be an object");
-	const pkgJson = (0, node_fs.existsSync)(packageJsonPath) ? JSON.parse((0, node_fs.readFileSync)(packageJsonPath, "utf-8")) : {};
+	const bosConfig = opts.bosConfig ?? await loadBosConfigForSharedDeps(opts.configDir, bosConfigPath);
+	if (!require_merge.isPlainObject(bosConfig)) throw new Error("the authored config must be an object");
 	const originalBos = JSON.stringify(bosConfig);
-	const originalPkg = JSON.stringify(pkgJson);
+	const catalog = require_workspace_catalog.readWorkspaceCatalog(workspaceRoot);
+	const originalCatalog = JSON.stringify(catalog);
 	const mode = opts.hostMode === "local" ? "catalog->bos" : "bos->catalog";
 	const refsByName = collectSharedDepRefs(bosConfig);
-	const catalog = pkgJson.workspaces?.catalog ?? {};
 	const resolvedDeps = {};
 	for (const [name, refs] of Object.entries(refsByName)) {
 		const first = refs[0];
@@ -137,15 +145,8 @@ async function syncResolvedSharedDeps(opts) {
 			sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b))
 		};
 	}
-	if (!pkgJson.workspaces) pkgJson.workspaces = {
-		packages: [],
-		catalog: {}
-	};
-	pkgJson.workspaces.catalog = catalog;
-	const nextBos = JSON.stringify(bosConfig);
-	const nextPkg = JSON.stringify(pkgJson);
-	const bosConfigChanged = nextBos !== originalBos;
-	const catalogChanged = nextPkg !== originalPkg;
+	const bosConfigChanged = JSON.stringify(bosConfig) !== originalBos;
+	const catalogChanged = JSON.stringify(catalog) !== originalCatalog;
 	if (bosConfigChanged) {
 		const resolvedDir = (0, node_path.dirname)(resolvedConfigPath);
 		if (!(0, node_fs.existsSync)(resolvedDir)) (0, node_fs.mkdirSync)(resolvedDir, { recursive: true });
@@ -161,7 +162,7 @@ async function syncResolvedSharedDeps(opts) {
 		};
 		writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\n`);
 	}
-	if (catalogChanged) writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\n`);
+	if (catalogChanged) require_workspace_catalog.writeWorkspaceCatalog(workspaceRoot, catalog);
 	const stableResolvedDeps = stableDepsObject(resolvedDeps);
 	const resolved = {
 		deps: stableResolvedDeps,

package/dist/shared-deps.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"shared-deps.cjs","names":["isPlainObject","SharedDepMapSchema","rebuildOrderedConfig"],"sources":["../src/shared-deps.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { type BosEnv, isPlainObject, type ResolvedConfigMeta, rebuildOrderedConfig } from \"./merge\";\nimport { type SharedDepConfig, SharedDepMapSchema } from \"./types\";\n\ninterface PackageJson {\n  workspaces?: {\n    packages?: string[];\n    catalog?: Record<string, string>;\n  };\n}\n\ninterface SharedDepRef {\n  source: string;\n  config: SharedDepConfig;\n}\n\ntype SharedDepsConfig = Record<string, unknown>;\n\ninterface NormalizedSharedDepConfig {\n  version: string;\n  requiredVersion: string | false;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  shareScope: string;\n}\n\nexport interface ResolvedSharedDep {\n  name: string;\n  version: string;\n  requiredVersion: string;\n  shareScope: string;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  sources: string[];\n}\n\nexport interface ResolvedSharedDeps {\n  deps: Record<string, ResolvedSharedDep>;\n  fingerprintSha256: string;\n}\n\nexport interface SharedDepsSyncResult {\n  mode: \"catalog->bos\" | \"bos->catalog\";\n  hostMode: \"local\" | \"remote\";\n  bosConfigChanged: boolean;\n  catalogChanged: boolean;\n  generatedChanged: boolean;\n  resolved: ResolvedSharedDeps;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction extractSemverExact(input: unknown): string | null {\n  if (typeof input !== \"string\") return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction caretRange(version: string): string {\n  return `^${version}`;\n}\n\nfunction stableDepsObject(\n  deps: Record<string, ResolvedSharedDep>,\n): Record<string, ResolvedSharedDep> {\n  const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));\n  const out: Record<string, ResolvedSharedDep> = {};\n  for (const key of keys) {\n    out[key] = deps[key]!;\n  }\n  return out;\n}\n\nfunction normalizeSharedDepConfig(config: SharedDepConfig): NormalizedSharedDepConfig {\n  return {\n    version: config.version,\n    requiredVersion: config.requiredVersion ?? false,\n    singleton: config.singleton ?? false,\n    eager: config.eager ?? false,\n    strictVersion: config.strictVersion ?? false,\n    shareScope: config.shareScope ?? \"default\",\n  };\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return isPlainObject(value) ? value : undefined;\n}\n\nfunction getSharedDepsMap(\n  value: unknown,\n  source: string,\n): Record<string, SharedDepConfig> | undefined {\n  if (value === undefined) return undefined;\n  const parsed = SharedDepMapSchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(`Invalid shared dependency map at ${source}`);\n  }\n  return value as Record<string, SharedDepConfig>;\n}\n\nfunction writeFileIfChanged(filePath: string, nextContent: string): boolean {\n  try {\n    const current = readFileSync(filePath, \"utf-8\");\n    if (current === nextContent) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nfunction fingerprintResolved(deps: Record<string, ResolvedSharedDep>): string {\n  return sha256(JSON.stringify(stableDepsObject(deps)));\n}\n\nfunction isSameSharedDepConfig(a: SharedDepConfig, b: SharedDepConfig): boolean {\n  const left = normalizeSharedDepConfig(a);\n  const right = normalizeSharedDepConfig(b);\n\n  return (\n    left.version === right.version &&\n    left.requiredVersion === right.requiredVersion &&\n    left.singleton === right.singleton &&\n    left.eager === right.eager &&\n    left.strictVersion === right.strictVersion &&\n    left.shareScope === right.shareScope\n  );\n}\n\nfunction collectSharedDepRefs(bosConfig: SharedDepsConfig): Record<string, SharedDepRef[]> {\n  const refs = new Map<string, SharedDepRef[]>();\n\n  const app = getObject(bosConfig.app);\n  const appUi = getObject(app?.ui);\n  const appApi = getObject(app?.api);\n  const appAuth = getObject(app?.auth);\n  const plugins = getObject(bosConfig.plugins);\n\n  if (appUi && \"shared\" in appUi) {\n    throw new Error(\n      \"app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.\",\n    );\n  }\n\n  const append = (source: string, shared: Record<string, SharedDepConfig> | undefined) => {\n    if (!shared) return;\n\n    for (const [name, config] of Object.entries(shared)) {\n      const existing = refs.get(name);\n      if (!existing) {\n        refs.set(name, [{ source, config }]);\n        continue;\n      }\n\n      if (!isSameSharedDepConfig(existing[0]!.config, config)) {\n        const previous = existing.map((ref) => ref.source).join(\", \");\n        throw new Error(\n          `Conflicting shared dependency \"${name}\" between ${previous} and ${source}`,\n        );\n      }\n\n      existing.push({ source, config });\n    }\n  };\n\n  append(\"app.api\", getSharedDepsMap(appApi?.shared, \"app.api.shared\"));\n  append(\"app.auth\", getSharedDepsMap(appAuth?.shared, \"app.auth.shared\"));\n\n  for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {\n    const pluginRecord = getObject(plugin);\n    if (!pluginRecord) continue;\n\n    const pluginApp = getObject(pluginRecord.app);\n    const pluginUi = getObject(pluginApp?.ui);\n    if (pluginUi && \"shared\" in pluginUi) {\n      throw new Error(\n        `app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`,\n      );\n    }\n    append(\n      `plugins.${pluginId}`,\n      getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`),\n    );\n  }\n\n  return Object.fromEntries(refs);\n}\n\nexport async function syncResolvedSharedDeps(opts: {\n  configDir: string;\n  hostMode: \"local\" | \"remote\";\n  bosConfig?: SharedDepsConfig;\n  env?: BosEnv;\n  extendsChain?: string[];\n}): Promise<SharedDepsSyncResult> {\n  const bosConfigPath = join(opts.configDir, \"bos.config.json\");\n  const resolvedConfigPath = join(opts.configDir, \".bos\", \"bos.resolved-config.json\");\n  const packageJsonPath = join(opts.configDir, \"package.json\");\n  const generatedPath = join(opts.configDir, \".bos\", \"generated\", \"shared-deps.json\");\n\n  const bosConfig: unknown = opts.bosConfig ?? JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n  if (!isPlainObject(bosConfig)) {\n    throw new Error(\"bos.config.json must be an object\");\n  }\n\n  const pkgJson = existsSync(packageJsonPath)\n    ? (JSON.parse(readFileSync(packageJsonPath, \"utf-8\")) as PackageJson)\n    : {};\n\n  const originalBos = JSON.stringify(bosConfig);\n  const originalPkg = JSON.stringify(pkgJson);\n\n  const mode = opts.hostMode === \"local\" ? \"catalog->bos\" : \"bos->catalog\";\n  const refsByName = collectSharedDepRefs(bosConfig);\n  const catalog = pkgJson.workspaces?.catalog ?? {};\n\n  const resolvedDeps: Record<string, ResolvedSharedDep> = {};\n\n  for (const [name, refs] of Object.entries(refsByName)) {\n    const first = refs[0];\n    if (!first) continue;\n\n    const exactFromConfig =\n      extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);\n    const exactFromCatalog = extractSemverExact(catalog[name]);\n    const version =\n      mode === \"catalog->bos\"\n        ? (exactFromCatalog ?? exactFromConfig)\n        : (exactFromConfig ?? exactFromCatalog);\n\n    if (!version) {\n      const sources = refs.map((ref) => ref.source).join(\", \");\n      throw new Error(\n        `Could not resolve exact version for shared dependency \"${name}\" from ${sources}`,\n      );\n    }\n\n    if (mode === \"catalog->bos\" && exactFromCatalog === null && exactFromConfig) {\n      catalog[name] = exactFromConfig;\n    }\n\n    if (mode === \"bos->catalog\" && catalog[name] !== version) {\n      catalog[name] = version;\n    }\n\n    for (const ref of refs) {\n      ref.config.version = version;\n      ref.config.requiredVersion = caretRange(version);\n      ref.config.shareScope = ref.config.shareScope ?? \"default\";\n    }\n\n    resolvedDeps[name] = {\n      name,\n      version,\n      requiredVersion: caretRange(version),\n      shareScope: first.config.shareScope ?? \"default\",\n      singleton: first.config.singleton ?? false,\n      eager: first.config.eager ?? false,\n      strictVersion: first.config.strictVersion ?? false,\n      sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b)),\n    };\n  }\n\n  if (!pkgJson.workspaces) {\n    pkgJson.workspaces = { packages: [], catalog: {} };\n  }\n  pkgJson.workspaces.catalog = catalog;\n\n  const nextBos = JSON.stringify(bosConfig);\n  const nextPkg = JSON.stringify(pkgJson);\n  const bosConfigChanged = nextBos !== originalBos;\n  const catalogChanged = nextPkg !== originalPkg;\n\n  if (bosConfigChanged) {\n    const resolvedDir = dirname(resolvedConfigPath);\n    if (!existsSync(resolvedDir)) {\n      mkdirSync(resolvedDir, { recursive: true });\n    }\n\n    const ordered = rebuildOrderedConfig(bosConfig);\n    const meta: ResolvedConfigMeta = {\n      env: opts.env ?? \"development\",\n      resolvedAt: new Date().toISOString(),\n      extendsChain: opts.extendsChain ?? [],\n      source: \"shared-sync\",\n    };\n    const resolvedOutput = {\n      _resolved: meta,\n      ...ordered,\n    };\n\n    writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\\n`);\n  }\n\n  if (catalogChanged) {\n    writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\\n`);\n  }\n\n  const stableResolvedDeps = stableDepsObject(resolvedDeps);\n  const resolved: ResolvedSharedDeps = {\n    deps: stableResolvedDeps,\n    fingerprintSha256: fingerprintResolved(stableResolvedDeps),\n  };\n\n  const nextGenerated = {\n    schemaVersion: 1,\n    kind: \"everything-dev/shared-deps\",\n    generatedAt: new Date().toISOString(),\n    deps: stableResolvedDeps,\n    fingerprintSha256: resolved.fingerprintSha256,\n    inputs: {\n      mode,\n      hostMode: opts.hostMode,\n    },\n  };\n\n  let prevFingerprint: string | null = null;\n  try {\n    const prev = JSON.parse(readFileSync(generatedPath, \"utf-8\"));\n    prevFingerprint = prev?.fingerprintSha256 ?? null;\n  } catch {\n    // ignore\n  }\n\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\\n`);\n\n  const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;\n\n  return {\n    mode,\n    hostMode: opts.hostMode,\n    bosConfigChanged,\n    catalogChanged,\n    generatedChanged,\n    resolved,\n  };\n}\n"],"mappings":";;;;;;;AAsDA,SAAS,OAAO,OAAuB;CACrC,mCAAkB,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,mBAAmB,OAA+B;CACzD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,QAAQ,MAAM,MAAM,mCAAmC;CAC7D,OAAO,QAAQ,MAAM,KAAK;AAC5B;AAEA,SAAS,WAAW,SAAyB;CAC3C,OAAO,IAAI;AACb;AAEA,SAAS,iBACP,MACmC;CACnC,MAAM,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;CAChE,MAAM,MAAyC,CAAC;CAChD,KAAK,MAAM,OAAO,MAChB,IAAI,OAAO,KAAK;CAElB,OAAO;AACT;AAEA,SAAS,yBAAyB,QAAoD;CACpF,OAAO;EACL,SAAS,OAAO;EAChB,iBAAiB,OAAO,mBAAmB;EAC3C,WAAW,OAAO,aAAa;EAC/B,OAAO,OAAO,SAAS;EACvB,eAAe,OAAO,iBAAiB;EACvC,YAAY,OAAO,cAAc;CACnC;AACF;AAEA,SAAS,UAAU,OAAqD;CACtE,OAAOA,4BAAc,KAAK,IAAI,QAAQ;AACxC;AAEA,SAAS,iBACP,OACA,QAC6C;CAC7C,IAAI,UAAU,QAAW,OAAO;CAEhC,IAAI,CADWC,iCAAmB,UAAU,KAClC,CAAC,CAAC,SACV,MAAM,IAAI,MAAM,oCAAoC,QAAQ;CAE9D,OAAO;AACT;AAEA,SAAS,mBAAmB,UAAkB,aAA8B;CAC1E,IAAI;EAEF,8BAD6B,UAAU,OAC7B,MAAM,aAAa,OAAO;CACtC,QAAQ,CAER;CAEA,2BAAc,UAAU,WAAW;CACnC,OAAO;AACT;AAEA,SAAS,oBAAoB,MAAiD;CAC5E,OAAO,OAAO,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AACtD;AAEA,SAAS,sBAAsB,GAAoB,GAA6B;CAC9E,MAAM,OAAO,yBAAyB,CAAC;CACvC,MAAM,QAAQ,yBAAyB,CAAC;CAExC,OACE,KAAK,YAAY,MAAM,WACvB,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,cAAc,MAAM,aACzB,KAAK,UAAU,MAAM,SACrB,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,eAAe,MAAM;AAE9B;AAEA,SAAS,qBAAqB,WAA6D;CACzF,MAAM,uBAAO,IAAI,IAA4B;CAE7C,MAAM,MAAM,UAAU,UAAU,GAAG;CACnC,MAAM,QAAQ,UAAU,KAAK,EAAE;CAC/B,MAAM,SAAS,UAAU,KAAK,GAAG;CACjC,MAAM,UAAU,UAAU,KAAK,IAAI;CACnC,MAAM,UAAU,UAAU,UAAU,OAAO;CAE3C,IAAI,SAAS,YAAY,OACvB,MAAM,IAAI,MACR,iHACF;CAGF,MAAM,UAAU,QAAgB,WAAwD;EACtF,IAAI,CAAC,QAAQ;EAEb,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,MAAM,GAAG;GACnD,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,IAAI,CAAC,UAAU;IACb,KAAK,IAAI,MAAM,CAAC;KAAE;KAAQ;IAAO,CAAC,CAAC;IACnC;GACF;GAEA,IAAI,CAAC,sBAAsB,SAAS,EAAE,CAAE,QAAQ,MAAM,GAAG;IACvD,MAAM,WAAW,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;IAC5D,MAAM,IAAI,MACR,kCAAkC,KAAK,YAAY,SAAS,OAAO,QACrE;GACF;GAEA,SAAS,KAAK;IAAE;IAAQ;GAAO,CAAC;EAClC;CACF;CAEA,OAAO,WAAW,iBAAiB,QAAQ,QAAQ,gBAAgB,CAAC;CACpE,OAAO,YAAY,iBAAiB,SAAS,QAAQ,iBAAiB,CAAC;CAEvE,KAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QAAQ,WAAW,CAAC,CAAC,GAAG;EAC9D,MAAM,eAAe,UAAU,MAAM;EACrC,IAAI,CAAC,cAAc;EAGnB,MAAM,WAAW,UADC,UAAU,aAAa,GACN,CAAC,EAAE,EAAE;EACxC,IAAI,YAAY,YAAY,UAC1B,MAAM,IAAI,MACR,mDAAmD,SAAS,4EAC9D;EAEF,OACE,WAAW,YACX,iBAAiB,aAAa,QAAQ,WAAW,SAAS,QAAQ,CACpE;CACF;CAEA,OAAO,OAAO,YAAY,IAAI;AAChC;AAEA,eAAsB,uBAAuB,MAMX;CAChC,MAAM,oCAAqB,KAAK,WAAW,iBAAiB;CAC5D,MAAM,yCAA0B,KAAK,WAAW,QAAQ,0BAA0B;CAClF,MAAM,sCAAuB,KAAK,WAAW,cAAc;CAC3D,MAAM,oCAAqB,KAAK,WAAW,QAAQ,aAAa,kBAAkB;CAElF,MAAM,YAAqB,KAAK,aAAa,KAAK,gCAAmB,eAAe,OAAO,CAAC;CAC5F,IAAI,CAACD,4BAAc,SAAS,GAC1B,MAAM,IAAI,MAAM,mCAAmC;CAGrD,MAAM,kCAAqB,eAAe,IACrC,KAAK,gCAAmB,iBAAiB,OAAO,CAAC,IAClD,CAAC;CAEL,MAAM,cAAc,KAAK,UAAU,SAAS;CAC5C,MAAM,cAAc,KAAK,UAAU,OAAO;CAE1C,MAAM,OAAO,KAAK,aAAa,UAAU,iBAAiB;CAC1D,MAAM,aAAa,qBAAqB,SAAS;CACjD,MAAM,UAAU,QAAQ,YAAY,WAAW,CAAC;CAEhD,MAAM,eAAkD,CAAC;CAEzD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO;EAEZ,MAAM,kBACJ,mBAAmB,MAAM,OAAO,OAAO,KAAK,mBAAmB,MAAM,OAAO,eAAe;EAC7F,MAAM,mBAAmB,mBAAmB,QAAQ,KAAK;EACzD,MAAM,UACJ,SAAS,iBACJ,oBAAoB,kBACpB,mBAAmB;EAE1B,IAAI,CAAC,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;GACvD,MAAM,IAAI,MACR,0DAA0D,KAAK,SAAS,SAC1E;EACF;EAEA,IAAI,SAAS,kBAAkB,qBAAqB,QAAQ,iBAC1D,QAAQ,QAAQ;EAGlB,IAAI,SAAS,kBAAkB,QAAQ,UAAU,SAC/C,QAAQ,QAAQ;EAGlB,KAAK,MAAM,OAAO,MAAM;GACtB,IAAI,OAAO,UAAU;GACrB,IAAI,OAAO,kBAAkB,WAAW,OAAO;GAC/C,IAAI,OAAO,aAAa,IAAI,OAAO,cAAc;EACnD;EAEA,aAAa,QAAQ;GACnB;GACA;GACA,iBAAiB,WAAW,OAAO;GACnC,YAAY,MAAM,OAAO,cAAc;GACvC,WAAW,MAAM,OAAO,aAAa;GACrC,OAAO,MAAM,OAAO,SAAS;GAC7B,eAAe,MAAM,OAAO,iBAAiB;GAC7C,SAAS,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC1E;CACF;CAEA,IAAI,CAAC,QAAQ,YACX,QAAQ,aAAa;EAAE,UAAU,CAAC;EAAG,SAAS,CAAC;CAAE;CAEnD,QAAQ,WAAW,UAAU;CAE7B,MAAM,UAAU,KAAK,UAAU,SAAS;CACxC,MAAM,UAAU,KAAK,UAAU,OAAO;CACtC,MAAM,mBAAmB,YAAY;CACrC,MAAM,iBAAiB,YAAY;CAEnC,IAAI,kBAAkB;EACpB,MAAM,qCAAsB,kBAAkB;EAC9C,IAAI,yBAAY,WAAW,GACzB,uBAAU,aAAa,EAAE,WAAW,KAAK,CAAC;EAG5C,MAAM,UAAUE,mCAAqB,SAAS;EAO9C,MAAM,iBAAiB;GACrB,WAAW;IANX,KAAK,KAAK,OAAO;IACjB,6BAAY,IAAI,KAAK,EAAC,CAAC,YAAY;IACnC,cAAc,KAAK,gBAAgB,CAAC;IACpC,QAAQ;GAGM;GACd,GAAG;EACL;EAEA,mBAAmB,oBAAoB,GAAG,KAAK,UAAU,gBAAgB,MAAM,CAAC,EAAE,GAAG;CACvF;CAEA,IAAI,gBACF,mBAAmB,iBAAiB,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,GAAG;CAG7E,MAAM,qBAAqB,iBAAiB,YAAY;CACxD,MAAM,WAA+B;EACnC,MAAM;EACN,mBAAmB,oBAAoB,kBAAkB;CAC3D;CAEA,MAAM,gBAAgB;EACpB,eAAe;EACf,MAAM;EACN,8BAAa,IAAI,KAAK,EAAC,CAAC,YAAY;EACpC,MAAM;EACN,mBAAmB,SAAS;EAC5B,QAAQ;GACN;GACA,UAAU,KAAK;EACjB;CACF;CAEA,IAAI,kBAAiC;CACrC,IAAI;EAEF,kBADa,KAAK,gCAAmB,eAAe,OAAO,CACtC,CAAC,EAAE,qBAAqB;CAC/C,QAAQ,CAER;CAEA,8CAAkB,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAAG;CAE/E,MAAM,mBAAmB,oBAAoB,cAAc;CAE3D,OAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"shared-deps.cjs","names":["join","existsSync","loadAppDescriptorConfig","readFileSync","createHash","isPlainObject","SharedDepMapSchema","findWorkspaceRoot","readWorkspaceCatalog","dirname","rebuildOrderedConfig"],"sources":["../src/shared-deps.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { loadAppDescriptorConfig } from \"./config\";\nimport { type BosEnv, isPlainObject, type ResolvedConfigMeta, rebuildOrderedConfig } from \"./merge\";\nimport { type SharedDepConfig, SharedDepMapSchema } from \"./types\";\nimport { findWorkspaceRoot } from \"./workspace\";\nimport { readWorkspaceCatalog, writeWorkspaceCatalog } from \"./workspace-catalog\";\n\nasync function loadBosConfigForSharedDeps(\n  configDir: string,\n  bosConfigPath: string,\n): Promise<unknown> {\n  const appDescriptorPath = join(configDir, \"bos.app.ts\");\n  if (existsSync(appDescriptorPath)) {\n    return loadAppDescriptorConfig(appDescriptorPath);\n  }\n  if (existsSync(bosConfigPath)) {\n    return JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n  }\n\n  return JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n}\n\ninterface SharedDepRef {\n  source: string;\n  config: SharedDepConfig;\n}\n\ntype SharedDepsConfig = Record<string, unknown>;\n\ninterface NormalizedSharedDepConfig {\n  version: string;\n  requiredVersion: string | false;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  shareScope: string;\n}\n\nexport interface ResolvedSharedDep {\n  name: string;\n  version: string;\n  requiredVersion: string;\n  shareScope: string;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  sources: string[];\n}\n\nexport interface ResolvedSharedDeps {\n  deps: Record<string, ResolvedSharedDep>;\n  fingerprintSha256: string;\n}\n\nexport interface SharedDepsSyncResult {\n  mode: \"catalog->bos\" | \"bos->catalog\";\n  hostMode: \"local\" | \"remote\";\n  bosConfigChanged: boolean;\n  catalogChanged: boolean;\n  generatedChanged: boolean;\n  resolved: ResolvedSharedDeps;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction extractSemverExact(input: unknown): string | null {\n  if (typeof input !== \"string\") return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction caretRange(version: string): string {\n  return `^${version}`;\n}\n\nfunction stableDepsObject(\n  deps: Record<string, ResolvedSharedDep>,\n): Record<string, ResolvedSharedDep> {\n  const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));\n  const out: Record<string, ResolvedSharedDep> = {};\n  for (const key of keys) {\n    out[key] = deps[key]!;\n  }\n  return out;\n}\n\nfunction normalizeSharedDepConfig(config: SharedDepConfig): NormalizedSharedDepConfig {\n  return {\n    version: config.version,\n    requiredVersion: config.requiredVersion ?? false,\n    singleton: config.singleton ?? false,\n    eager: config.eager ?? false,\n    strictVersion: config.strictVersion ?? false,\n    shareScope: config.shareScope ?? \"default\",\n  };\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return isPlainObject(value) ? value : undefined;\n}\n\nfunction getSharedDepsMap(\n  value: unknown,\n  source: string,\n): Record<string, SharedDepConfig> | undefined {\n  if (value === undefined) return undefined;\n  const parsed = SharedDepMapSchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(`Invalid shared dependency map at ${source}`);\n  }\n  return value as Record<string, SharedDepConfig>;\n}\n\nfunction writeFileIfChanged(filePath: string, nextContent: string): boolean {\n  try {\n    const current = readFileSync(filePath, \"utf-8\");\n    if (current === nextContent) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nfunction fingerprintResolved(deps: Record<string, ResolvedSharedDep>): string {\n  return sha256(JSON.stringify(stableDepsObject(deps)));\n}\n\nfunction isSameSharedDepConfig(a: SharedDepConfig, b: SharedDepConfig): boolean {\n  const left = normalizeSharedDepConfig(a);\n  const right = normalizeSharedDepConfig(b);\n\n  return (\n    left.version === right.version &&\n    left.requiredVersion === right.requiredVersion &&\n    left.singleton === right.singleton &&\n    left.eager === right.eager &&\n    left.strictVersion === right.strictVersion &&\n    left.shareScope === right.shareScope\n  );\n}\n\nfunction collectSharedDepRefs(bosConfig: SharedDepsConfig): Record<string, SharedDepRef[]> {\n  const refs = new Map<string, SharedDepRef[]>();\n\n  const app = getObject(bosConfig.app);\n  const appUi = getObject(app?.ui);\n  const appApi = getObject(app?.api);\n  const appAuth = getObject(app?.auth);\n  const plugins = getObject(bosConfig.plugins);\n\n  if (appUi && \"shared\" in appUi) {\n    throw new Error(\n      \"app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.\",\n    );\n  }\n\n  const append = (source: string, shared: Record<string, SharedDepConfig> | undefined) => {\n    if (!shared) return;\n\n    for (const [name, config] of Object.entries(shared)) {\n      const existing = refs.get(name);\n      if (!existing) {\n        refs.set(name, [{ source, config }]);\n        continue;\n      }\n\n      if (!isSameSharedDepConfig(existing[0]!.config, config)) {\n        const previous = existing.map((ref) => ref.source).join(\", \");\n        throw new Error(\n          `Conflicting shared dependency \"${name}\" between ${previous} and ${source}`,\n        );\n      }\n\n      existing.push({ source, config });\n    }\n  };\n\n  append(\"app.api\", getSharedDepsMap(appApi?.shared, \"app.api.shared\"));\n  append(\"app.auth\", getSharedDepsMap(appAuth?.shared, \"app.auth.shared\"));\n\n  for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {\n    const pluginRecord = getObject(plugin);\n    if (!pluginRecord) continue;\n\n    const pluginApp = getObject(pluginRecord.app);\n    const pluginUi = getObject(pluginApp?.ui);\n    if (pluginUi && \"shared\" in pluginUi) {\n      throw new Error(\n        `app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`,\n      );\n    }\n    append(\n      `plugins.${pluginId}`,\n      getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`),\n    );\n  }\n\n  return Object.fromEntries(refs);\n}\n\nexport async function syncResolvedSharedDeps(opts: {\n  configDir: string;\n  hostMode: \"local\" | \"remote\";\n  bosConfig?: SharedDepsConfig;\n  env?: BosEnv;\n  extendsChain?: string[];\n}): Promise<SharedDepsSyncResult> {\n  const bosConfigPath = join(opts.configDir, \"bos.config.json\");\n  const resolvedConfigPath = join(opts.configDir, \".bos\", \"bos.resolved-config.json\");\n  const workspaceRoot = findWorkspaceRoot(opts.configDir)?.dir ?? opts.configDir;\n  const generatedPath = join(opts.configDir, \".bos\", \"generated\", \"shared-deps.json\");\n\n  const bosConfig: unknown =\n    opts.bosConfig ?? (await loadBosConfigForSharedDeps(opts.configDir, bosConfigPath));\n  if (!isPlainObject(bosConfig)) {\n    throw new Error(\"the authored config must be an object\");\n  }\n\n  const originalBos = JSON.stringify(bosConfig);\n  const catalog = readWorkspaceCatalog(workspaceRoot);\n  const originalCatalog = JSON.stringify(catalog);\n\n  const mode = opts.hostMode === \"local\" ? \"catalog->bos\" : \"bos->catalog\";\n  const refsByName = collectSharedDepRefs(bosConfig);\n\n  const resolvedDeps: Record<string, ResolvedSharedDep> = {};\n\n  for (const [name, refs] of Object.entries(refsByName)) {\n    const first = refs[0];\n    if (!first) continue;\n\n    const exactFromConfig =\n      extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);\n    const exactFromCatalog = extractSemverExact(catalog[name]);\n    const version =\n      mode === \"catalog->bos\"\n        ? (exactFromCatalog ?? exactFromConfig)\n        : (exactFromConfig ?? exactFromCatalog);\n\n    if (!version) {\n      const sources = refs.map((ref) => ref.source).join(\", \");\n      throw new Error(\n        `Could not resolve exact version for shared dependency \"${name}\" from ${sources}`,\n      );\n    }\n\n    if (mode === \"catalog->bos\" && exactFromCatalog === null && exactFromConfig) {\n      catalog[name] = exactFromConfig;\n    }\n\n    if (mode === \"bos->catalog\" && catalog[name] !== version) {\n      catalog[name] = version;\n    }\n\n    for (const ref of refs) {\n      ref.config.version = version;\n      ref.config.requiredVersion = caretRange(version);\n      ref.config.shareScope = ref.config.shareScope ?? \"default\";\n    }\n\n    resolvedDeps[name] = {\n      name,\n      version,\n      requiredVersion: caretRange(version),\n      shareScope: first.config.shareScope ?? \"default\",\n      singleton: first.config.singleton ?? false,\n      eager: first.config.eager ?? false,\n      strictVersion: first.config.strictVersion ?? false,\n      sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b)),\n    };\n  }\n\n  const nextBos = JSON.stringify(bosConfig);\n  const bosConfigChanged = nextBos !== originalBos;\n  const catalogChanged = JSON.stringify(catalog) !== originalCatalog;\n\n  if (bosConfigChanged) {\n    const resolvedDir = dirname(resolvedConfigPath);\n    if (!existsSync(resolvedDir)) {\n      mkdirSync(resolvedDir, { recursive: true });\n    }\n\n    const ordered = rebuildOrderedConfig(bosConfig);\n    const meta: ResolvedConfigMeta = {\n      env: opts.env ?? \"development\",\n      resolvedAt: new Date().toISOString(),\n      extendsChain: opts.extendsChain ?? [],\n      source: \"shared-sync\",\n    };\n    const resolvedOutput = {\n      _resolved: meta,\n      ...ordered,\n    };\n\n    writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\\n`);\n  }\n\n  if (catalogChanged) {\n    writeWorkspaceCatalog(workspaceRoot, catalog);\n  }\n\n  const stableResolvedDeps = stableDepsObject(resolvedDeps);\n  const resolved: ResolvedSharedDeps = {\n    deps: stableResolvedDeps,\n    fingerprintSha256: fingerprintResolved(stableResolvedDeps),\n  };\n\n  const nextGenerated = {\n    schemaVersion: 1,\n    kind: \"everything-dev/shared-deps\",\n    generatedAt: new Date().toISOString(),\n    deps: stableResolvedDeps,\n    fingerprintSha256: resolved.fingerprintSha256,\n    inputs: {\n      mode,\n      hostMode: opts.hostMode,\n    },\n  };\n\n  let prevFingerprint: string | null = null;\n  try {\n    const prev = JSON.parse(readFileSync(generatedPath, \"utf-8\"));\n    prevFingerprint = prev?.fingerprintSha256 ?? null;\n  } catch {\n    // ignore\n  }\n\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\\n`);\n\n  const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;\n\n  return {\n    mode,\n    hostMode: opts.hostMode,\n    bosConfigChanged,\n    catalogChanged,\n    generatedChanged,\n    resolved,\n  };\n}\n"],"mappings":";;;;;;;;;;AASA,eAAe,2BACb,WACA,eACkB;CAClB,MAAM,wBAAoBA,gBAAK,WAAW,YAAY;CACtD,QAAIC,oBAAW,iBAAiB,GAC9B,OAAOC,uCAAwB,iBAAiB;CAElD,QAAID,oBAAW,aAAa,GAC1B,OAAO,KAAK,UAAME,sBAAa,eAAe,OAAO,CAAC;CAGxD,OAAO,KAAK,UAAMA,sBAAa,eAAe,OAAO,CAAC;AACxD;AA2CA,SAAS,OAAO,OAAuB;CACrC,WAAOC,wBAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,mBAAmB,OAA+B;CACzD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,QAAQ,MAAM,MAAM,mCAAmC;CAC7D,OAAO,QAAQ,MAAM,KAAK;AAC5B;AAEA,SAAS,WAAW,SAAyB;CAC3C,OAAO,IAAI;AACb;AAEA,SAAS,iBACP,MACmC;CACnC,MAAM,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;CAChE,MAAM,MAAyC,CAAC;CAChD,KAAK,MAAM,OAAO,MAChB,IAAI,OAAO,KAAK;CAElB,OAAO;AACT;AAEA,SAAS,yBAAyB,QAAoD;CACpF,OAAO;EACL,SAAS,OAAO;EAChB,iBAAiB,OAAO,mBAAmB;EAC3C,WAAW,OAAO,aAAa;EAC/B,OAAO,OAAO,SAAS;EACvB,eAAe,OAAO,iBAAiB;EACvC,YAAY,OAAO,cAAc;CACnC;AACF;AAEA,SAAS,UAAU,OAAqD;CACtE,OAAOC,4BAAc,KAAK,IAAI,QAAQ;AACxC;AAEA,SAAS,iBACP,OACA,QAC6C;CAC7C,IAAI,UAAU,QAAW,OAAO;CAEhC,IAAI,CADWC,iCAAmB,UAAU,KAClC,CAAC,CAAC,SACV,MAAM,IAAI,MAAM,oCAAoC,QAAQ;CAE9D,OAAO;AACT;AAEA,SAAS,mBAAmB,UAAkB,aAA8B;CAC1E,IAAI;EAEF,QADgBH,sBAAa,UAAU,OAC7B,MAAM,aAAa,OAAO;CACtC,QAAQ,CAER;CAEA,2BAAc,UAAU,WAAW;CACnC,OAAO;AACT;AAEA,SAAS,oBAAoB,MAAiD;CAC5E,OAAO,OAAO,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AACtD;AAEA,SAAS,sBAAsB,GAAoB,GAA6B;CAC9E,MAAM,OAAO,yBAAyB,CAAC;CACvC,MAAM,QAAQ,yBAAyB,CAAC;CAExC,OACE,KAAK,YAAY,MAAM,WACvB,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,cAAc,MAAM,aACzB,KAAK,UAAU,MAAM,SACrB,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,eAAe,MAAM;AAE9B;AAEA,SAAS,qBAAqB,WAA6D;CACzF,MAAM,uBAAO,IAAI,IAA4B;CAE7C,MAAM,MAAM,UAAU,UAAU,GAAG;CACnC,MAAM,QAAQ,UAAU,KAAK,EAAE;CAC/B,MAAM,SAAS,UAAU,KAAK,GAAG;CACjC,MAAM,UAAU,UAAU,KAAK,IAAI;CACnC,MAAM,UAAU,UAAU,UAAU,OAAO;CAE3C,IAAI,SAAS,YAAY,OACvB,MAAM,IAAI,MACR,iHACF;CAGF,MAAM,UAAU,QAAgB,WAAwD;EACtF,IAAI,CAAC,QAAQ;EAEb,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,MAAM,GAAG;GACnD,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,IAAI,CAAC,UAAU;IACb,KAAK,IAAI,MAAM,CAAC;KAAE;KAAQ;IAAO,CAAC,CAAC;IACnC;GACF;GAEA,IAAI,CAAC,sBAAsB,SAAS,EAAE,CAAE,QAAQ,MAAM,GAAG;IACvD,MAAM,WAAW,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;IAC5D,MAAM,IAAI,MACR,kCAAkC,KAAK,YAAY,SAAS,OAAO,QACrE;GACF;GAEA,SAAS,KAAK;IAAE;IAAQ;GAAO,CAAC;EAClC;CACF;CAEA,OAAO,WAAW,iBAAiB,QAAQ,QAAQ,gBAAgB,CAAC;CACpE,OAAO,YAAY,iBAAiB,SAAS,QAAQ,iBAAiB,CAAC;CAEvE,KAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QAAQ,WAAW,CAAC,CAAC,GAAG;EAC9D,MAAM,eAAe,UAAU,MAAM;EACrC,IAAI,CAAC,cAAc;EAGnB,MAAM,WAAW,UADC,UAAU,aAAa,GACN,CAAC,EAAE,EAAE;EACxC,IAAI,YAAY,YAAY,UAC1B,MAAM,IAAI,MACR,mDAAmD,SAAS,4EAC9D;EAEF,OACE,WAAW,YACX,iBAAiB,aAAa,QAAQ,WAAW,SAAS,QAAQ,CACpE;CACF;CAEA,OAAO,OAAO,YAAY,IAAI;AAChC;AAEA,eAAsB,uBAAuB,MAMX;CAChC,MAAM,oBAAgBH,gBAAK,KAAK,WAAW,iBAAiB;CAC5D,MAAM,yBAAqBA,gBAAK,KAAK,WAAW,QAAQ,0BAA0B;CAClF,MAAM,gBAAgBO,oCAAkB,KAAK,SAAS,CAAC,EAAE,OAAO,KAAK;CACrE,MAAM,oBAAgBP,gBAAK,KAAK,WAAW,QAAQ,aAAa,kBAAkB;CAElF,MAAM,YACJ,KAAK,aAAc,MAAM,2BAA2B,KAAK,WAAW,aAAa;CACnF,IAAI,CAACK,4BAAc,SAAS,GAC1B,MAAM,IAAI,MAAM,uCAAuC;CAGzD,MAAM,cAAc,KAAK,UAAU,SAAS;CAC5C,MAAM,UAAUG,+CAAqB,aAAa;CAClD,MAAM,kBAAkB,KAAK,UAAU,OAAO;CAE9C,MAAM,OAAO,KAAK,aAAa,UAAU,iBAAiB;CAC1D,MAAM,aAAa,qBAAqB,SAAS;CAEjD,MAAM,eAAkD,CAAC;CAEzD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO;EAEZ,MAAM,kBACJ,mBAAmB,MAAM,OAAO,OAAO,KAAK,mBAAmB,MAAM,OAAO,eAAe;EAC7F,MAAM,mBAAmB,mBAAmB,QAAQ,KAAK;EACzD,MAAM,UACJ,SAAS,iBACJ,oBAAoB,kBACpB,mBAAmB;EAE1B,IAAI,CAAC,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;GACvD,MAAM,IAAI,MACR,0DAA0D,KAAK,SAAS,SAC1E;EACF;EAEA,IAAI,SAAS,kBAAkB,qBAAqB,QAAQ,iBAC1D,QAAQ,QAAQ;EAGlB,IAAI,SAAS,kBAAkB,QAAQ,UAAU,SAC/C,QAAQ,QAAQ;EAGlB,KAAK,MAAM,OAAO,MAAM;GACtB,IAAI,OAAO,UAAU;GACrB,IAAI,OAAO,kBAAkB,WAAW,OAAO;GAC/C,IAAI,OAAO,aAAa,IAAI,OAAO,cAAc;EACnD;EAEA,aAAa,QAAQ;GACnB;GACA;GACA,iBAAiB,WAAW,OAAO;GACnC,YAAY,MAAM,OAAO,cAAc;GACvC,WAAW,MAAM,OAAO,aAAa;GACrC,OAAO,MAAM,OAAO,SAAS;GAC7B,eAAe,MAAM,OAAO,iBAAiB;GAC7C,SAAS,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC1E;CACF;CAGA,MAAM,mBADU,KAAK,UAAU,SACA,MAAM;CACrC,MAAM,iBAAiB,KAAK,UAAU,OAAO,MAAM;CAEnD,IAAI,kBAAkB;EACpB,MAAM,kBAAcC,mBAAQ,kBAAkB;EAC9C,IAAI,KAACR,oBAAW,WAAW,GACzB,uBAAU,aAAa,EAAE,WAAW,KAAK,CAAC;EAG5C,MAAM,UAAUS,mCAAqB,SAAS;EAO9C,MAAM,iBAAiB;GACrB,WAAW;IANX,KAAK,KAAK,OAAO;IACjB,6BAAY,IAAI,KAAK,EAAC,CAAC,YAAY;IACnC,cAAc,KAAK,gBAAgB,CAAC;IACpC,QAAQ;GAGM;GACd,GAAG;EACL;EAEA,mBAAmB,oBAAoB,GAAG,KAAK,UAAU,gBAAgB,MAAM,CAAC,EAAE,GAAG;CACvF;CAEA,IAAI,gBACF,gDAAsB,eAAe,OAAO;CAG9C,MAAM,qBAAqB,iBAAiB,YAAY;CACxD,MAAM,WAA+B;EACnC,MAAM;EACN,mBAAmB,oBAAoB,kBAAkB;CAC3D;CAEA,MAAM,gBAAgB;EACpB,eAAe;EACf,MAAM;EACN,8BAAa,IAAI,KAAK,EAAC,CAAC,YAAY;EACpC,MAAM;EACN,mBAAmB,SAAS;EAC5B,QAAQ;GACN;GACA,UAAU,KAAK;EACjB;CACF;CAEA,IAAI,kBAAiC;CACrC,IAAI;EAEF,kBADa,KAAK,UAAMP,sBAAa,eAAe,OAAO,CACtC,CAAC,EAAE,qBAAqB;CAC/C,QAAQ,CAER;CAEA,2BAAUM,mBAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAAG;CAE/E,MAAM,mBAAmB,oBAAoB,cAAc;CAE3D,OAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA;EACA;CACF;AACF"}

package/dist/shared-deps.mjs

@@ -1,10 +1,19 @@
 import { isPlainObject, rebuildOrderedConfig } from "./merge.mjs";
 import { SharedDepMapSchema } from "./types.mjs";
+import { loadAppDescriptorConfig } from "./config.mjs";
+import { readWorkspaceCatalog, writeWorkspaceCatalog } from "./workspace-catalog.mjs";
+import { findWorkspaceRoot } from "./workspace.mjs";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { createHash } from "node:crypto";
 
 //#region src/shared-deps.ts
+async function loadBosConfigForSharedDeps(configDir, bosConfigPath) {
+	const appDescriptorPath = join(configDir, "bos.app.ts");
+	if (existsSync(appDescriptorPath)) return loadAppDescriptorConfig(appDescriptorPath);
+	if (existsSync(bosConfigPath)) return JSON.parse(readFileSync(bosConfigPath, "utf-8"));
+	return JSON.parse(readFileSync(bosConfigPath, "utf-8"));
+}
 function sha256(input) {
 	return createHash("sha256").update(input).digest("hex");
 }
@@ -98,16 +107,15 @@ function collectSharedDepRefs(bosConfig) {
 async function syncResolvedSharedDeps(opts) {
 	const bosConfigPath = join(opts.configDir, "bos.config.json");
 	const resolvedConfigPath = join(opts.configDir, ".bos", "bos.resolved-config.json");
-	const packageJsonPath = join(opts.configDir, "package.json");
+	const workspaceRoot = findWorkspaceRoot(opts.configDir)?.dir ?? opts.configDir;
 	const generatedPath = join(opts.configDir, ".bos", "generated", "shared-deps.json");
-	const bosConfig = opts.bosConfig ?? JSON.parse(readFileSync(bosConfigPath, "utf-8"));
-	if (!isPlainObject(bosConfig)) throw new Error("bos.config.json must be an object");
-	const pkgJson = existsSync(packageJsonPath) ? JSON.parse(readFileSync(packageJsonPath, "utf-8")) : {};
+	const bosConfig = opts.bosConfig ?? await loadBosConfigForSharedDeps(opts.configDir, bosConfigPath);
+	if (!isPlainObject(bosConfig)) throw new Error("the authored config must be an object");
 	const originalBos = JSON.stringify(bosConfig);
-	const originalPkg = JSON.stringify(pkgJson);
+	const catalog = readWorkspaceCatalog(workspaceRoot);
+	const originalCatalog = JSON.stringify(catalog);
 	const mode = opts.hostMode === "local" ? "catalog->bos" : "bos->catalog";
 	const refsByName = collectSharedDepRefs(bosConfig);
-	const catalog = pkgJson.workspaces?.catalog ?? {};
 	const resolvedDeps = {};
 	for (const [name, refs] of Object.entries(refsByName)) {
 		const first = refs[0];
@@ -137,15 +145,8 @@ async function syncResolvedSharedDeps(opts) {
 			sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b))
 		};
 	}
-	if (!pkgJson.workspaces) pkgJson.workspaces = {
-		packages: [],
-		catalog: {}
-	};
-	pkgJson.workspaces.catalog = catalog;
-	const nextBos = JSON.stringify(bosConfig);
-	const nextPkg = JSON.stringify(pkgJson);
-	const bosConfigChanged = nextBos !== originalBos;
-	const catalogChanged = nextPkg !== originalPkg;
+	const bosConfigChanged = JSON.stringify(bosConfig) !== originalBos;
+	const catalogChanged = JSON.stringify(catalog) !== originalCatalog;
 	if (bosConfigChanged) {
 		const resolvedDir = dirname(resolvedConfigPath);
 		if (!existsSync(resolvedDir)) mkdirSync(resolvedDir, { recursive: true });
@@ -161,7 +162,7 @@ async function syncResolvedSharedDeps(opts) {
 		};
 		writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\n`);
 	}
-	if (catalogChanged) writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\n`);
+	if (catalogChanged) writeWorkspaceCatalog(workspaceRoot, catalog);
 	const stableResolvedDeps = stableDepsObject(resolvedDeps);
 	const resolved = {
 		deps: stableResolvedDeps,

package/dist/shared-deps.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"shared-deps.mjs","names":[],"sources":["../src/shared-deps.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { type BosEnv, isPlainObject, type ResolvedConfigMeta, rebuildOrderedConfig } from \"./merge\";\nimport { type SharedDepConfig, SharedDepMapSchema } from \"./types\";\n\ninterface PackageJson {\n  workspaces?: {\n    packages?: string[];\n    catalog?: Record<string, string>;\n  };\n}\n\ninterface SharedDepRef {\n  source: string;\n  config: SharedDepConfig;\n}\n\ntype SharedDepsConfig = Record<string, unknown>;\n\ninterface NormalizedSharedDepConfig {\n  version: string;\n  requiredVersion: string | false;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  shareScope: string;\n}\n\nexport interface ResolvedSharedDep {\n  name: string;\n  version: string;\n  requiredVersion: string;\n  shareScope: string;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  sources: string[];\n}\n\nexport interface ResolvedSharedDeps {\n  deps: Record<string, ResolvedSharedDep>;\n  fingerprintSha256: string;\n}\n\nexport interface SharedDepsSyncResult {\n  mode: \"catalog->bos\" | \"bos->catalog\";\n  hostMode: \"local\" | \"remote\";\n  bosConfigChanged: boolean;\n  catalogChanged: boolean;\n  generatedChanged: boolean;\n  resolved: ResolvedSharedDeps;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction extractSemverExact(input: unknown): string | null {\n  if (typeof input !== \"string\") return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction caretRange(version: string): string {\n  return `^${version}`;\n}\n\nfunction stableDepsObject(\n  deps: Record<string, ResolvedSharedDep>,\n): Record<string, ResolvedSharedDep> {\n  const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));\n  const out: Record<string, ResolvedSharedDep> = {};\n  for (const key of keys) {\n    out[key] = deps[key]!;\n  }\n  return out;\n}\n\nfunction normalizeSharedDepConfig(config: SharedDepConfig): NormalizedSharedDepConfig {\n  return {\n    version: config.version,\n    requiredVersion: config.requiredVersion ?? false,\n    singleton: config.singleton ?? false,\n    eager: config.eager ?? false,\n    strictVersion: config.strictVersion ?? false,\n    shareScope: config.shareScope ?? \"default\",\n  };\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return isPlainObject(value) ? value : undefined;\n}\n\nfunction getSharedDepsMap(\n  value: unknown,\n  source: string,\n): Record<string, SharedDepConfig> | undefined {\n  if (value === undefined) return undefined;\n  const parsed = SharedDepMapSchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(`Invalid shared dependency map at ${source}`);\n  }\n  return value as Record<string, SharedDepConfig>;\n}\n\nfunction writeFileIfChanged(filePath: string, nextContent: string): boolean {\n  try {\n    const current = readFileSync(filePath, \"utf-8\");\n    if (current === nextContent) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nfunction fingerprintResolved(deps: Record<string, ResolvedSharedDep>): string {\n  return sha256(JSON.stringify(stableDepsObject(deps)));\n}\n\nfunction isSameSharedDepConfig(a: SharedDepConfig, b: SharedDepConfig): boolean {\n  const left = normalizeSharedDepConfig(a);\n  const right = normalizeSharedDepConfig(b);\n\n  return (\n    left.version === right.version &&\n    left.requiredVersion === right.requiredVersion &&\n    left.singleton === right.singleton &&\n    left.eager === right.eager &&\n    left.strictVersion === right.strictVersion &&\n    left.shareScope === right.shareScope\n  );\n}\n\nfunction collectSharedDepRefs(bosConfig: SharedDepsConfig): Record<string, SharedDepRef[]> {\n  const refs = new Map<string, SharedDepRef[]>();\n\n  const app = getObject(bosConfig.app);\n  const appUi = getObject(app?.ui);\n  const appApi = getObject(app?.api);\n  const appAuth = getObject(app?.auth);\n  const plugins = getObject(bosConfig.plugins);\n\n  if (appUi && \"shared\" in appUi) {\n    throw new Error(\n      \"app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.\",\n    );\n  }\n\n  const append = (source: string, shared: Record<string, SharedDepConfig> | undefined) => {\n    if (!shared) return;\n\n    for (const [name, config] of Object.entries(shared)) {\n      const existing = refs.get(name);\n      if (!existing) {\n        refs.set(name, [{ source, config }]);\n        continue;\n      }\n\n      if (!isSameSharedDepConfig(existing[0]!.config, config)) {\n        const previous = existing.map((ref) => ref.source).join(\", \");\n        throw new Error(\n          `Conflicting shared dependency \"${name}\" between ${previous} and ${source}`,\n        );\n      }\n\n      existing.push({ source, config });\n    }\n  };\n\n  append(\"app.api\", getSharedDepsMap(appApi?.shared, \"app.api.shared\"));\n  append(\"app.auth\", getSharedDepsMap(appAuth?.shared, \"app.auth.shared\"));\n\n  for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {\n    const pluginRecord = getObject(plugin);\n    if (!pluginRecord) continue;\n\n    const pluginApp = getObject(pluginRecord.app);\n    const pluginUi = getObject(pluginApp?.ui);\n    if (pluginUi && \"shared\" in pluginUi) {\n      throw new Error(\n        `app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`,\n      );\n    }\n    append(\n      `plugins.${pluginId}`,\n      getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`),\n    );\n  }\n\n  return Object.fromEntries(refs);\n}\n\nexport async function syncResolvedSharedDeps(opts: {\n  configDir: string;\n  hostMode: \"local\" | \"remote\";\n  bosConfig?: SharedDepsConfig;\n  env?: BosEnv;\n  extendsChain?: string[];\n}): Promise<SharedDepsSyncResult> {\n  const bosConfigPath = join(opts.configDir, \"bos.config.json\");\n  const resolvedConfigPath = join(opts.configDir, \".bos\", \"bos.resolved-config.json\");\n  const packageJsonPath = join(opts.configDir, \"package.json\");\n  const generatedPath = join(opts.configDir, \".bos\", \"generated\", \"shared-deps.json\");\n\n  const bosConfig: unknown = opts.bosConfig ?? JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n  if (!isPlainObject(bosConfig)) {\n    throw new Error(\"bos.config.json must be an object\");\n  }\n\n  const pkgJson = existsSync(packageJsonPath)\n    ? (JSON.parse(readFileSync(packageJsonPath, \"utf-8\")) as PackageJson)\n    : {};\n\n  const originalBos = JSON.stringify(bosConfig);\n  const originalPkg = JSON.stringify(pkgJson);\n\n  const mode = opts.hostMode === \"local\" ? \"catalog->bos\" : \"bos->catalog\";\n  const refsByName = collectSharedDepRefs(bosConfig);\n  const catalog = pkgJson.workspaces?.catalog ?? {};\n\n  const resolvedDeps: Record<string, ResolvedSharedDep> = {};\n\n  for (const [name, refs] of Object.entries(refsByName)) {\n    const first = refs[0];\n    if (!first) continue;\n\n    const exactFromConfig =\n      extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);\n    const exactFromCatalog = extractSemverExact(catalog[name]);\n    const version =\n      mode === \"catalog->bos\"\n        ? (exactFromCatalog ?? exactFromConfig)\n        : (exactFromConfig ?? exactFromCatalog);\n\n    if (!version) {\n      const sources = refs.map((ref) => ref.source).join(\", \");\n      throw new Error(\n        `Could not resolve exact version for shared dependency \"${name}\" from ${sources}`,\n      );\n    }\n\n    if (mode === \"catalog->bos\" && exactFromCatalog === null && exactFromConfig) {\n      catalog[name] = exactFromConfig;\n    }\n\n    if (mode === \"bos->catalog\" && catalog[name] !== version) {\n      catalog[name] = version;\n    }\n\n    for (const ref of refs) {\n      ref.config.version = version;\n      ref.config.requiredVersion = caretRange(version);\n      ref.config.shareScope = ref.config.shareScope ?? \"default\";\n    }\n\n    resolvedDeps[name] = {\n      name,\n      version,\n      requiredVersion: caretRange(version),\n      shareScope: first.config.shareScope ?? \"default\",\n      singleton: first.config.singleton ?? false,\n      eager: first.config.eager ?? false,\n      strictVersion: first.config.strictVersion ?? false,\n      sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b)),\n    };\n  }\n\n  if (!pkgJson.workspaces) {\n    pkgJson.workspaces = { packages: [], catalog: {} };\n  }\n  pkgJson.workspaces.catalog = catalog;\n\n  const nextBos = JSON.stringify(bosConfig);\n  const nextPkg = JSON.stringify(pkgJson);\n  const bosConfigChanged = nextBos !== originalBos;\n  const catalogChanged = nextPkg !== originalPkg;\n\n  if (bosConfigChanged) {\n    const resolvedDir = dirname(resolvedConfigPath);\n    if (!existsSync(resolvedDir)) {\n      mkdirSync(resolvedDir, { recursive: true });\n    }\n\n    const ordered = rebuildOrderedConfig(bosConfig);\n    const meta: ResolvedConfigMeta = {\n      env: opts.env ?? \"development\",\n      resolvedAt: new Date().toISOString(),\n      extendsChain: opts.extendsChain ?? [],\n      source: \"shared-sync\",\n    };\n    const resolvedOutput = {\n      _resolved: meta,\n      ...ordered,\n    };\n\n    writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\\n`);\n  }\n\n  if (catalogChanged) {\n    writeFileIfChanged(packageJsonPath, `${JSON.stringify(pkgJson, null, 2)}\\n`);\n  }\n\n  const stableResolvedDeps = stableDepsObject(resolvedDeps);\n  const resolved: ResolvedSharedDeps = {\n    deps: stableResolvedDeps,\n    fingerprintSha256: fingerprintResolved(stableResolvedDeps),\n  };\n\n  const nextGenerated = {\n    schemaVersion: 1,\n    kind: \"everything-dev/shared-deps\",\n    generatedAt: new Date().toISOString(),\n    deps: stableResolvedDeps,\n    fingerprintSha256: resolved.fingerprintSha256,\n    inputs: {\n      mode,\n      hostMode: opts.hostMode,\n    },\n  };\n\n  let prevFingerprint: string | null = null;\n  try {\n    const prev = JSON.parse(readFileSync(generatedPath, \"utf-8\"));\n    prevFingerprint = prev?.fingerprintSha256 ?? null;\n  } catch {\n    // ignore\n  }\n\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\\n`);\n\n  const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;\n\n  return {\n    mode,\n    hostMode: opts.hostMode,\n    bosConfigChanged,\n    catalogChanged,\n    generatedChanged,\n    resolved,\n  };\n}\n"],"mappings":";;;;;;;AAsDA,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,mBAAmB,OAA+B;CACzD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,QAAQ,MAAM,MAAM,mCAAmC;CAC7D,OAAO,QAAQ,MAAM,KAAK;AAC5B;AAEA,SAAS,WAAW,SAAyB;CAC3C,OAAO,IAAI;AACb;AAEA,SAAS,iBACP,MACmC;CACnC,MAAM,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;CAChE,MAAM,MAAyC,CAAC;CAChD,KAAK,MAAM,OAAO,MAChB,IAAI,OAAO,KAAK;CAElB,OAAO;AACT;AAEA,SAAS,yBAAyB,QAAoD;CACpF,OAAO;EACL,SAAS,OAAO;EAChB,iBAAiB,OAAO,mBAAmB;EAC3C,WAAW,OAAO,aAAa;EAC/B,OAAO,OAAO,SAAS;EACvB,eAAe,OAAO,iBAAiB;EACvC,YAAY,OAAO,cAAc;CACnC;AACF;AAEA,SAAS,UAAU,OAAqD;CACtE,OAAO,cAAc,KAAK,IAAI,QAAQ;AACxC;AAEA,SAAS,iBACP,OACA,QAC6C;CAC7C,IAAI,UAAU,QAAW,OAAO;CAEhC,IAAI,CADW,mBAAmB,UAAU,KAClC,CAAC,CAAC,SACV,MAAM,IAAI,MAAM,oCAAoC,QAAQ;CAE9D,OAAO;AACT;AAEA,SAAS,mBAAmB,UAAkB,aAA8B;CAC1E,IAAI;EAEF,IADgB,aAAa,UAAU,OAC7B,MAAM,aAAa,OAAO;CACtC,QAAQ,CAER;CAEA,cAAc,UAAU,WAAW;CACnC,OAAO;AACT;AAEA,SAAS,oBAAoB,MAAiD;CAC5E,OAAO,OAAO,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AACtD;AAEA,SAAS,sBAAsB,GAAoB,GAA6B;CAC9E,MAAM,OAAO,yBAAyB,CAAC;CACvC,MAAM,QAAQ,yBAAyB,CAAC;CAExC,OACE,KAAK,YAAY,MAAM,WACvB,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,cAAc,MAAM,aACzB,KAAK,UAAU,MAAM,SACrB,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,eAAe,MAAM;AAE9B;AAEA,SAAS,qBAAqB,WAA6D;CACzF,MAAM,uBAAO,IAAI,IAA4B;CAE7C,MAAM,MAAM,UAAU,UAAU,GAAG;CACnC,MAAM,QAAQ,UAAU,KAAK,EAAE;CAC/B,MAAM,SAAS,UAAU,KAAK,GAAG;CACjC,MAAM,UAAU,UAAU,KAAK,IAAI;CACnC,MAAM,UAAU,UAAU,UAAU,OAAO;CAE3C,IAAI,SAAS,YAAY,OACvB,MAAM,IAAI,MACR,iHACF;CAGF,MAAM,UAAU,QAAgB,WAAwD;EACtF,IAAI,CAAC,QAAQ;EAEb,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,MAAM,GAAG;GACnD,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,IAAI,CAAC,UAAU;IACb,KAAK,IAAI,MAAM,CAAC;KAAE;KAAQ;IAAO,CAAC,CAAC;IACnC;GACF;GAEA,IAAI,CAAC,sBAAsB,SAAS,EAAE,CAAE,QAAQ,MAAM,GAAG;IACvD,MAAM,WAAW,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;IAC5D,MAAM,IAAI,MACR,kCAAkC,KAAK,YAAY,SAAS,OAAO,QACrE;GACF;GAEA,SAAS,KAAK;IAAE;IAAQ;GAAO,CAAC;EAClC;CACF;CAEA,OAAO,WAAW,iBAAiB,QAAQ,QAAQ,gBAAgB,CAAC;CACpE,OAAO,YAAY,iBAAiB,SAAS,QAAQ,iBAAiB,CAAC;CAEvE,KAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QAAQ,WAAW,CAAC,CAAC,GAAG;EAC9D,MAAM,eAAe,UAAU,MAAM;EACrC,IAAI,CAAC,cAAc;EAGnB,MAAM,WAAW,UADC,UAAU,aAAa,GACN,CAAC,EAAE,EAAE;EACxC,IAAI,YAAY,YAAY,UAC1B,MAAM,IAAI,MACR,mDAAmD,SAAS,4EAC9D;EAEF,OACE,WAAW,YACX,iBAAiB,aAAa,QAAQ,WAAW,SAAS,QAAQ,CACpE;CACF;CAEA,OAAO,OAAO,YAAY,IAAI;AAChC;AAEA,eAAsB,uBAAuB,MAMX;CAChC,MAAM,gBAAgB,KAAK,KAAK,WAAW,iBAAiB;CAC5D,MAAM,qBAAqB,KAAK,KAAK,WAAW,QAAQ,0BAA0B;CAClF,MAAM,kBAAkB,KAAK,KAAK,WAAW,cAAc;CAC3D,MAAM,gBAAgB,KAAK,KAAK,WAAW,QAAQ,aAAa,kBAAkB;CAElF,MAAM,YAAqB,KAAK,aAAa,KAAK,MAAM,aAAa,eAAe,OAAO,CAAC;CAC5F,IAAI,CAAC,cAAc,SAAS,GAC1B,MAAM,IAAI,MAAM,mCAAmC;CAGrD,MAAM,UAAU,WAAW,eAAe,IACrC,KAAK,MAAM,aAAa,iBAAiB,OAAO,CAAC,IAClD,CAAC;CAEL,MAAM,cAAc,KAAK,UAAU,SAAS;CAC5C,MAAM,cAAc,KAAK,UAAU,OAAO;CAE1C,MAAM,OAAO,KAAK,aAAa,UAAU,iBAAiB;CAC1D,MAAM,aAAa,qBAAqB,SAAS;CACjD,MAAM,UAAU,QAAQ,YAAY,WAAW,CAAC;CAEhD,MAAM,eAAkD,CAAC;CAEzD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO;EAEZ,MAAM,kBACJ,mBAAmB,MAAM,OAAO,OAAO,KAAK,mBAAmB,MAAM,OAAO,eAAe;EAC7F,MAAM,mBAAmB,mBAAmB,QAAQ,KAAK;EACzD,MAAM,UACJ,SAAS,iBACJ,oBAAoB,kBACpB,mBAAmB;EAE1B,IAAI,CAAC,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;GACvD,MAAM,IAAI,MACR,0DAA0D,KAAK,SAAS,SAC1E;EACF;EAEA,IAAI,SAAS,kBAAkB,qBAAqB,QAAQ,iBAC1D,QAAQ,QAAQ;EAGlB,IAAI,SAAS,kBAAkB,QAAQ,UAAU,SAC/C,QAAQ,QAAQ;EAGlB,KAAK,MAAM,OAAO,MAAM;GACtB,IAAI,OAAO,UAAU;GACrB,IAAI,OAAO,kBAAkB,WAAW,OAAO;GAC/C,IAAI,OAAO,aAAa,IAAI,OAAO,cAAc;EACnD;EAEA,aAAa,QAAQ;GACnB;GACA;GACA,iBAAiB,WAAW,OAAO;GACnC,YAAY,MAAM,OAAO,cAAc;GACvC,WAAW,MAAM,OAAO,aAAa;GACrC,OAAO,MAAM,OAAO,SAAS;GAC7B,eAAe,MAAM,OAAO,iBAAiB;GAC7C,SAAS,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC1E;CACF;CAEA,IAAI,CAAC,QAAQ,YACX,QAAQ,aAAa;EAAE,UAAU,CAAC;EAAG,SAAS,CAAC;CAAE;CAEnD,QAAQ,WAAW,UAAU;CAE7B,MAAM,UAAU,KAAK,UAAU,SAAS;CACxC,MAAM,UAAU,KAAK,UAAU,OAAO;CACtC,MAAM,mBAAmB,YAAY;CACrC,MAAM,iBAAiB,YAAY;CAEnC,IAAI,kBAAkB;EACpB,MAAM,cAAc,QAAQ,kBAAkB;EAC9C,IAAI,CAAC,WAAW,WAAW,GACzB,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;EAG5C,MAAM,UAAU,qBAAqB,SAAS;EAO9C,MAAM,iBAAiB;GACrB,WAAW;IANX,KAAK,KAAK,OAAO;IACjB,6BAAY,IAAI,KAAK,EAAC,CAAC,YAAY;IACnC,cAAc,KAAK,gBAAgB,CAAC;IACpC,QAAQ;GAGM;GACd,GAAG;EACL;EAEA,mBAAmB,oBAAoB,GAAG,KAAK,UAAU,gBAAgB,MAAM,CAAC,EAAE,GAAG;CACvF;CAEA,IAAI,gBACF,mBAAmB,iBAAiB,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,GAAG;CAG7E,MAAM,qBAAqB,iBAAiB,YAAY;CACxD,MAAM,WAA+B;EACnC,MAAM;EACN,mBAAmB,oBAAoB,kBAAkB;CAC3D;CAEA,MAAM,gBAAgB;EACpB,eAAe;EACf,MAAM;EACN,8BAAa,IAAI,KAAK,EAAC,CAAC,YAAY;EACpC,MAAM;EACN,mBAAmB,SAAS;EAC5B,QAAQ;GACN;GACA,UAAU,KAAK;EACjB;CACF;CAEA,IAAI,kBAAiC;CACrC,IAAI;EAEF,kBADa,KAAK,MAAM,aAAa,eAAe,OAAO,CACtC,CAAC,EAAE,qBAAqB;CAC/C,QAAQ,CAER;CAEA,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAAG;CAE/E,MAAM,mBAAmB,oBAAoB,cAAc;CAE3D,OAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"shared-deps.mjs","names":[],"sources":["../src/shared-deps.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { loadAppDescriptorConfig } from \"./config\";\nimport { type BosEnv, isPlainObject, type ResolvedConfigMeta, rebuildOrderedConfig } from \"./merge\";\nimport { type SharedDepConfig, SharedDepMapSchema } from \"./types\";\nimport { findWorkspaceRoot } from \"./workspace\";\nimport { readWorkspaceCatalog, writeWorkspaceCatalog } from \"./workspace-catalog\";\n\nasync function loadBosConfigForSharedDeps(\n  configDir: string,\n  bosConfigPath: string,\n): Promise<unknown> {\n  const appDescriptorPath = join(configDir, \"bos.app.ts\");\n  if (existsSync(appDescriptorPath)) {\n    return loadAppDescriptorConfig(appDescriptorPath);\n  }\n  if (existsSync(bosConfigPath)) {\n    return JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n  }\n\n  return JSON.parse(readFileSync(bosConfigPath, \"utf-8\"));\n}\n\ninterface SharedDepRef {\n  source: string;\n  config: SharedDepConfig;\n}\n\ntype SharedDepsConfig = Record<string, unknown>;\n\ninterface NormalizedSharedDepConfig {\n  version: string;\n  requiredVersion: string | false;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  shareScope: string;\n}\n\nexport interface ResolvedSharedDep {\n  name: string;\n  version: string;\n  requiredVersion: string;\n  shareScope: string;\n  singleton: boolean;\n  eager: boolean;\n  strictVersion: boolean;\n  sources: string[];\n}\n\nexport interface ResolvedSharedDeps {\n  deps: Record<string, ResolvedSharedDep>;\n  fingerprintSha256: string;\n}\n\nexport interface SharedDepsSyncResult {\n  mode: \"catalog->bos\" | \"bos->catalog\";\n  hostMode: \"local\" | \"remote\";\n  bosConfigChanged: boolean;\n  catalogChanged: boolean;\n  generatedChanged: boolean;\n  resolved: ResolvedSharedDeps;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction extractSemverExact(input: unknown): string | null {\n  if (typeof input !== \"string\") return null;\n  const match = input.match(/\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?/);\n  return match ? match[0] : null;\n}\n\nfunction caretRange(version: string): string {\n  return `^${version}`;\n}\n\nfunction stableDepsObject(\n  deps: Record<string, ResolvedSharedDep>,\n): Record<string, ResolvedSharedDep> {\n  const keys = Object.keys(deps).sort((a, b) => a.localeCompare(b));\n  const out: Record<string, ResolvedSharedDep> = {};\n  for (const key of keys) {\n    out[key] = deps[key]!;\n  }\n  return out;\n}\n\nfunction normalizeSharedDepConfig(config: SharedDepConfig): NormalizedSharedDepConfig {\n  return {\n    version: config.version,\n    requiredVersion: config.requiredVersion ?? false,\n    singleton: config.singleton ?? false,\n    eager: config.eager ?? false,\n    strictVersion: config.strictVersion ?? false,\n    shareScope: config.shareScope ?? \"default\",\n  };\n}\n\nfunction getObject(value: unknown): Record<string, unknown> | undefined {\n  return isPlainObject(value) ? value : undefined;\n}\n\nfunction getSharedDepsMap(\n  value: unknown,\n  source: string,\n): Record<string, SharedDepConfig> | undefined {\n  if (value === undefined) return undefined;\n  const parsed = SharedDepMapSchema.safeParse(value);\n  if (!parsed.success) {\n    throw new Error(`Invalid shared dependency map at ${source}`);\n  }\n  return value as Record<string, SharedDepConfig>;\n}\n\nfunction writeFileIfChanged(filePath: string, nextContent: string): boolean {\n  try {\n    const current = readFileSync(filePath, \"utf-8\");\n    if (current === nextContent) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, nextContent);\n  return true;\n}\n\nfunction fingerprintResolved(deps: Record<string, ResolvedSharedDep>): string {\n  return sha256(JSON.stringify(stableDepsObject(deps)));\n}\n\nfunction isSameSharedDepConfig(a: SharedDepConfig, b: SharedDepConfig): boolean {\n  const left = normalizeSharedDepConfig(a);\n  const right = normalizeSharedDepConfig(b);\n\n  return (\n    left.version === right.version &&\n    left.requiredVersion === right.requiredVersion &&\n    left.singleton === right.singleton &&\n    left.eager === right.eager &&\n    left.strictVersion === right.strictVersion &&\n    left.shareScope === right.shareScope\n  );\n}\n\nfunction collectSharedDepRefs(bosConfig: SharedDepsConfig): Record<string, SharedDepRef[]> {\n  const refs = new Map<string, SharedDepRef[]>();\n\n  const app = getObject(bosConfig.app);\n  const appUi = getObject(app?.ui);\n  const appApi = getObject(app?.api);\n  const appAuth = getObject(app?.auth);\n  const plugins = getObject(bosConfig.plugins);\n\n  if (appUi && \"shared\" in appUi) {\n    throw new Error(\n      \"app.ui.shared is no longer supported. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.\",\n    );\n  }\n\n  const append = (source: string, shared: Record<string, SharedDepConfig> | undefined) => {\n    if (!shared) return;\n\n    for (const [name, config] of Object.entries(shared)) {\n      const existing = refs.get(name);\n      if (!existing) {\n        refs.set(name, [{ source, config }]);\n        continue;\n      }\n\n      if (!isSameSharedDepConfig(existing[0]!.config, config)) {\n        const previous = existing.map((ref) => ref.source).join(\", \");\n        throw new Error(\n          `Conflicting shared dependency \"${name}\" between ${previous} and ${source}`,\n        );\n      }\n\n      existing.push({ source, config });\n    }\n  };\n\n  append(\"app.api\", getSharedDepsMap(appApi?.shared, \"app.api.shared\"));\n  append(\"app.auth\", getSharedDepsMap(appAuth?.shared, \"app.auth.shared\"));\n\n  for (const [pluginId, plugin] of Object.entries(plugins ?? {})) {\n    const pluginRecord = getObject(plugin);\n    if (!pluginRecord) continue;\n\n    const pluginApp = getObject(pluginRecord.app);\n    const pluginUi = getObject(pluginApp?.ui);\n    if (pluginUi && \"shared\" in pluginUi) {\n      throw new Error(\n        `app.ui.shared is no longer supported in plugins.${pluginId}. Move shared deps to app.api.shared, app.auth.shared, or plugins.*.shared.`,\n      );\n    }\n    append(\n      `plugins.${pluginId}`,\n      getSharedDepsMap(pluginRecord.shared, `plugins.${pluginId}.shared`),\n    );\n  }\n\n  return Object.fromEntries(refs);\n}\n\nexport async function syncResolvedSharedDeps(opts: {\n  configDir: string;\n  hostMode: \"local\" | \"remote\";\n  bosConfig?: SharedDepsConfig;\n  env?: BosEnv;\n  extendsChain?: string[];\n}): Promise<SharedDepsSyncResult> {\n  const bosConfigPath = join(opts.configDir, \"bos.config.json\");\n  const resolvedConfigPath = join(opts.configDir, \".bos\", \"bos.resolved-config.json\");\n  const workspaceRoot = findWorkspaceRoot(opts.configDir)?.dir ?? opts.configDir;\n  const generatedPath = join(opts.configDir, \".bos\", \"generated\", \"shared-deps.json\");\n\n  const bosConfig: unknown =\n    opts.bosConfig ?? (await loadBosConfigForSharedDeps(opts.configDir, bosConfigPath));\n  if (!isPlainObject(bosConfig)) {\n    throw new Error(\"the authored config must be an object\");\n  }\n\n  const originalBos = JSON.stringify(bosConfig);\n  const catalog = readWorkspaceCatalog(workspaceRoot);\n  const originalCatalog = JSON.stringify(catalog);\n\n  const mode = opts.hostMode === \"local\" ? \"catalog->bos\" : \"bos->catalog\";\n  const refsByName = collectSharedDepRefs(bosConfig);\n\n  const resolvedDeps: Record<string, ResolvedSharedDep> = {};\n\n  for (const [name, refs] of Object.entries(refsByName)) {\n    const first = refs[0];\n    if (!first) continue;\n\n    const exactFromConfig =\n      extractSemverExact(first.config.version) ?? extractSemverExact(first.config.requiredVersion);\n    const exactFromCatalog = extractSemverExact(catalog[name]);\n    const version =\n      mode === \"catalog->bos\"\n        ? (exactFromCatalog ?? exactFromConfig)\n        : (exactFromConfig ?? exactFromCatalog);\n\n    if (!version) {\n      const sources = refs.map((ref) => ref.source).join(\", \");\n      throw new Error(\n        `Could not resolve exact version for shared dependency \"${name}\" from ${sources}`,\n      );\n    }\n\n    if (mode === \"catalog->bos\" && exactFromCatalog === null && exactFromConfig) {\n      catalog[name] = exactFromConfig;\n    }\n\n    if (mode === \"bos->catalog\" && catalog[name] !== version) {\n      catalog[name] = version;\n    }\n\n    for (const ref of refs) {\n      ref.config.version = version;\n      ref.config.requiredVersion = caretRange(version);\n      ref.config.shareScope = ref.config.shareScope ?? \"default\";\n    }\n\n    resolvedDeps[name] = {\n      name,\n      version,\n      requiredVersion: caretRange(version),\n      shareScope: first.config.shareScope ?? \"default\",\n      singleton: first.config.singleton ?? false,\n      eager: first.config.eager ?? false,\n      strictVersion: first.config.strictVersion ?? false,\n      sources: refs.map((ref) => ref.source).sort((a, b) => a.localeCompare(b)),\n    };\n  }\n\n  const nextBos = JSON.stringify(bosConfig);\n  const bosConfigChanged = nextBos !== originalBos;\n  const catalogChanged = JSON.stringify(catalog) !== originalCatalog;\n\n  if (bosConfigChanged) {\n    const resolvedDir = dirname(resolvedConfigPath);\n    if (!existsSync(resolvedDir)) {\n      mkdirSync(resolvedDir, { recursive: true });\n    }\n\n    const ordered = rebuildOrderedConfig(bosConfig);\n    const meta: ResolvedConfigMeta = {\n      env: opts.env ?? \"development\",\n      resolvedAt: new Date().toISOString(),\n      extendsChain: opts.extendsChain ?? [],\n      source: \"shared-sync\",\n    };\n    const resolvedOutput = {\n      _resolved: meta,\n      ...ordered,\n    };\n\n    writeFileIfChanged(resolvedConfigPath, `${JSON.stringify(resolvedOutput, null, 2)}\\n`);\n  }\n\n  if (catalogChanged) {\n    writeWorkspaceCatalog(workspaceRoot, catalog);\n  }\n\n  const stableResolvedDeps = stableDepsObject(resolvedDeps);\n  const resolved: ResolvedSharedDeps = {\n    deps: stableResolvedDeps,\n    fingerprintSha256: fingerprintResolved(stableResolvedDeps),\n  };\n\n  const nextGenerated = {\n    schemaVersion: 1,\n    kind: \"everything-dev/shared-deps\",\n    generatedAt: new Date().toISOString(),\n    deps: stableResolvedDeps,\n    fingerprintSha256: resolved.fingerprintSha256,\n    inputs: {\n      mode,\n      hostMode: opts.hostMode,\n    },\n  };\n\n  let prevFingerprint: string | null = null;\n  try {\n    const prev = JSON.parse(readFileSync(generatedPath, \"utf-8\"));\n    prevFingerprint = prev?.fingerprintSha256 ?? null;\n  } catch {\n    // ignore\n  }\n\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, `${JSON.stringify(nextGenerated, null, 2)}\\n`);\n\n  const generatedChanged = prevFingerprint !== nextGenerated.fingerprintSha256;\n\n  return {\n    mode,\n    hostMode: opts.hostMode,\n    bosConfigChanged,\n    catalogChanged,\n    generatedChanged,\n    resolved,\n  };\n}\n"],"mappings":";;;;;;;;;;AASA,eAAe,2BACb,WACA,eACkB;CAClB,MAAM,oBAAoB,KAAK,WAAW,YAAY;CACtD,IAAI,WAAW,iBAAiB,GAC9B,OAAO,wBAAwB,iBAAiB;CAElD,IAAI,WAAW,aAAa,GAC1B,OAAO,KAAK,MAAM,aAAa,eAAe,OAAO,CAAC;CAGxD,OAAO,KAAK,MAAM,aAAa,eAAe,OAAO,CAAC;AACxD;AA2CA,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AACxD;AAEA,SAAS,mBAAmB,OAA+B;CACzD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,MAAM,QAAQ,MAAM,MAAM,mCAAmC;CAC7D,OAAO,QAAQ,MAAM,KAAK;AAC5B;AAEA,SAAS,WAAW,SAAyB;CAC3C,OAAO,IAAI;AACb;AAEA,SAAS,iBACP,MACmC;CACnC,MAAM,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;CAChE,MAAM,MAAyC,CAAC;CAChD,KAAK,MAAM,OAAO,MAChB,IAAI,OAAO,KAAK;CAElB,OAAO;AACT;AAEA,SAAS,yBAAyB,QAAoD;CACpF,OAAO;EACL,SAAS,OAAO;EAChB,iBAAiB,OAAO,mBAAmB;EAC3C,WAAW,OAAO,aAAa;EAC/B,OAAO,OAAO,SAAS;EACvB,eAAe,OAAO,iBAAiB;EACvC,YAAY,OAAO,cAAc;CACnC;AACF;AAEA,SAAS,UAAU,OAAqD;CACtE,OAAO,cAAc,KAAK,IAAI,QAAQ;AACxC;AAEA,SAAS,iBACP,OACA,QAC6C;CAC7C,IAAI,UAAU,QAAW,OAAO;CAEhC,IAAI,CADW,mBAAmB,UAAU,KAClC,CAAC,CAAC,SACV,MAAM,IAAI,MAAM,oCAAoC,QAAQ;CAE9D,OAAO;AACT;AAEA,SAAS,mBAAmB,UAAkB,aAA8B;CAC1E,IAAI;EAEF,IADgB,aAAa,UAAU,OAC7B,MAAM,aAAa,OAAO;CACtC,QAAQ,CAER;CAEA,cAAc,UAAU,WAAW;CACnC,OAAO;AACT;AAEA,SAAS,oBAAoB,MAAiD;CAC5E,OAAO,OAAO,KAAK,UAAU,iBAAiB,IAAI,CAAC,CAAC;AACtD;AAEA,SAAS,sBAAsB,GAAoB,GAA6B;CAC9E,MAAM,OAAO,yBAAyB,CAAC;CACvC,MAAM,QAAQ,yBAAyB,CAAC;CAExC,OACE,KAAK,YAAY,MAAM,WACvB,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,cAAc,MAAM,aACzB,KAAK,UAAU,MAAM,SACrB,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,eAAe,MAAM;AAE9B;AAEA,SAAS,qBAAqB,WAA6D;CACzF,MAAM,uBAAO,IAAI,IAA4B;CAE7C,MAAM,MAAM,UAAU,UAAU,GAAG;CACnC,MAAM,QAAQ,UAAU,KAAK,EAAE;CAC/B,MAAM,SAAS,UAAU,KAAK,GAAG;CACjC,MAAM,UAAU,UAAU,KAAK,IAAI;CACnC,MAAM,UAAU,UAAU,UAAU,OAAO;CAE3C,IAAI,SAAS,YAAY,OACvB,MAAM,IAAI,MACR,iHACF;CAGF,MAAM,UAAU,QAAgB,WAAwD;EACtF,IAAI,CAAC,QAAQ;EAEb,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,MAAM,GAAG;GACnD,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,IAAI,CAAC,UAAU;IACb,KAAK,IAAI,MAAM,CAAC;KAAE;KAAQ;IAAO,CAAC,CAAC;IACnC;GACF;GAEA,IAAI,CAAC,sBAAsB,SAAS,EAAE,CAAE,QAAQ,MAAM,GAAG;IACvD,MAAM,WAAW,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;IAC5D,MAAM,IAAI,MACR,kCAAkC,KAAK,YAAY,SAAS,OAAO,QACrE;GACF;GAEA,SAAS,KAAK;IAAE;IAAQ;GAAO,CAAC;EAClC;CACF;CAEA,OAAO,WAAW,iBAAiB,QAAQ,QAAQ,gBAAgB,CAAC;CACpE,OAAO,YAAY,iBAAiB,SAAS,QAAQ,iBAAiB,CAAC;CAEvE,KAAK,MAAM,CAAC,UAAU,WAAW,OAAO,QAAQ,WAAW,CAAC,CAAC,GAAG;EAC9D,MAAM,eAAe,UAAU,MAAM;EACrC,IAAI,CAAC,cAAc;EAGnB,MAAM,WAAW,UADC,UAAU,aAAa,GACN,CAAC,EAAE,EAAE;EACxC,IAAI,YAAY,YAAY,UAC1B,MAAM,IAAI,MACR,mDAAmD,SAAS,4EAC9D;EAEF,OACE,WAAW,YACX,iBAAiB,aAAa,QAAQ,WAAW,SAAS,QAAQ,CACpE;CACF;CAEA,OAAO,OAAO,YAAY,IAAI;AAChC;AAEA,eAAsB,uBAAuB,MAMX;CAChC,MAAM,gBAAgB,KAAK,KAAK,WAAW,iBAAiB;CAC5D,MAAM,qBAAqB,KAAK,KAAK,WAAW,QAAQ,0BAA0B;CAClF,MAAM,gBAAgB,kBAAkB,KAAK,SAAS,CAAC,EAAE,OAAO,KAAK;CACrE,MAAM,gBAAgB,KAAK,KAAK,WAAW,QAAQ,aAAa,kBAAkB;CAElF,MAAM,YACJ,KAAK,aAAc,MAAM,2BAA2B,KAAK,WAAW,aAAa;CACnF,IAAI,CAAC,cAAc,SAAS,GAC1B,MAAM,IAAI,MAAM,uCAAuC;CAGzD,MAAM,cAAc,KAAK,UAAU,SAAS;CAC5C,MAAM,UAAU,qBAAqB,aAAa;CAClD,MAAM,kBAAkB,KAAK,UAAU,OAAO;CAE9C,MAAM,OAAO,KAAK,aAAa,UAAU,iBAAiB;CAC1D,MAAM,aAAa,qBAAqB,SAAS;CAEjD,MAAM,eAAkD,CAAC;CAEzD,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,UAAU,GAAG;EACrD,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO;EAEZ,MAAM,kBACJ,mBAAmB,MAAM,OAAO,OAAO,KAAK,mBAAmB,MAAM,OAAO,eAAe;EAC7F,MAAM,mBAAmB,mBAAmB,QAAQ,KAAK;EACzD,MAAM,UACJ,SAAS,iBACJ,oBAAoB,kBACpB,mBAAmB;EAE1B,IAAI,CAAC,SAAS;GACZ,MAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,IAAI;GACvD,MAAM,IAAI,MACR,0DAA0D,KAAK,SAAS,SAC1E;EACF;EAEA,IAAI,SAAS,kBAAkB,qBAAqB,QAAQ,iBAC1D,QAAQ,QAAQ;EAGlB,IAAI,SAAS,kBAAkB,QAAQ,UAAU,SAC/C,QAAQ,QAAQ;EAGlB,KAAK,MAAM,OAAO,MAAM;GACtB,IAAI,OAAO,UAAU;GACrB,IAAI,OAAO,kBAAkB,WAAW,OAAO;GAC/C,IAAI,OAAO,aAAa,IAAI,OAAO,cAAc;EACnD;EAEA,aAAa,QAAQ;GACnB;GACA;GACA,iBAAiB,WAAW,OAAO;GACnC,YAAY,MAAM,OAAO,cAAc;GACvC,WAAW,MAAM,OAAO,aAAa;GACrC,OAAO,MAAM,OAAO,SAAS;GAC7B,eAAe,MAAM,OAAO,iBAAiB;GAC7C,SAAS,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC1E;CACF;CAGA,MAAM,mBADU,KAAK,UAAU,SACA,MAAM;CACrC,MAAM,iBAAiB,KAAK,UAAU,OAAO,MAAM;CAEnD,IAAI,kBAAkB;EACpB,MAAM,cAAc,QAAQ,kBAAkB;EAC9C,IAAI,CAAC,WAAW,WAAW,GACzB,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;EAG5C,MAAM,UAAU,qBAAqB,SAAS;EAO9C,MAAM,iBAAiB;GACrB,WAAW;IANX,KAAK,KAAK,OAAO;IACjB,6BAAY,IAAI,KAAK,EAAC,CAAC,YAAY;IACnC,cAAc,KAAK,gBAAgB,CAAC;IACpC,QAAQ;GAGM;GACd,GAAG;EACL;EAEA,mBAAmB,oBAAoB,GAAG,KAAK,UAAU,gBAAgB,MAAM,CAAC,EAAE,GAAG;CACvF;CAEA,IAAI,gBACF,sBAAsB,eAAe,OAAO;CAG9C,MAAM,qBAAqB,iBAAiB,YAAY;CACxD,MAAM,WAA+B;EACnC,MAAM;EACN,mBAAmB,oBAAoB,kBAAkB;CAC3D;CAEA,MAAM,gBAAgB;EACpB,eAAe;EACf,MAAM;EACN,8BAAa,IAAI,KAAK,EAAC,CAAC,YAAY;EACpC,MAAM;EACN,mBAAmB,SAAS;EAC5B,QAAQ;GACN;GACA,UAAU,KAAK;EACjB;CACF;CAEA,IAAI,kBAAiC;CACrC,IAAI;EAEF,kBADa,KAAK,MAAM,aAAa,eAAe,OAAO,CACtC,CAAC,EAAE,qBAAqB;CAC/C,QAAQ,CAER;CAEA,UAAU,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,mBAAmB,eAAe,GAAG,KAAK,UAAU,eAAe,MAAM,CAAC,EAAE,GAAG;CAE/E,MAAM,mBAAmB,oBAAoB,cAAc;CAE3D,OAAO;EACL;EACA,UAAU,KAAK;EACf;EACA;EACA;EACA;CACF;AACF"}

package/dist/start-config-source.cjs

@@ -0,0 +1,24 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+//#region src/start-config-source.ts
+function resolveStartConfigSource(input, env) {
+	if (input.configPath) return { configPath: input.configPath };
+	const account = input.account ?? env.BOS_ACCOUNT;
+	const domain = input.domain ?? env.BOS_GATEWAY;
+	if (account && domain) return { registry: {
+		account,
+		domain
+	} };
+	return {};
+}
+/** A registry-fetched start is a real deployment — a localhost origin there is
+* a stray dev leftover. Local starts (explicit --config-path, bare `bos start`)
+* keep the operator's environment: their localhost origin IS the reachable
+* deployment context the in-process host's auth seam reads. */
+function isRegistryStart(source) {
+	return source.registry !== void 0;
+}
+
+//#endregion
+exports.isRegistryStart = isRegistryStart;
+exports.resolveStartConfigSource = resolveStartConfigSource;
+//# sourceMappingURL=start-config-source.cjs.map

package/dist/start-config-source.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-config-source.cjs","names":[],"sources":["../src/start-config-source.ts"],"sourcesContent":["/**\n * The `bos start --config` decision: an explicit local config outranks the\n * registry identity (BOS_ACCOUNT/BOS_GATEWAY) — FastKV is fetched only when\n * no local config was given.\n */\n\nexport interface StartConfigSource {\n  configPath?: string;\n  registry?: { account: string; domain: string };\n}\n\nexport function resolveStartConfigSource(\n  input: { configPath?: string; account?: string; domain?: string },\n  env: { BOS_ACCOUNT?: string; BOS_GATEWAY?: string },\n): StartConfigSource {\n  if (input.configPath) {\n    return { configPath: input.configPath };\n  }\n  const account = input.account ?? env.BOS_ACCOUNT;\n  const domain = input.domain ?? env.BOS_GATEWAY;\n  if (account && domain) {\n    return { registry: { account, domain } };\n  }\n  return {};\n}\n\n/** A registry-fetched start is a real deployment — a localhost origin there is\n * a stray dev leftover. Local starts (explicit --config-path, bare `bos start`)\n * keep the operator's environment: their localhost origin IS the reachable\n * deployment context the in-process host's auth seam reads. */\nexport function isRegistryStart(source: StartConfigSource): boolean {\n  return source.registry !== undefined;\n}\n"],"mappings":";;AAWA,SAAgB,yBACd,OACA,KACmB;CACnB,IAAI,MAAM,YACR,OAAO,EAAE,YAAY,MAAM,WAAW;CAExC,MAAM,UAAU,MAAM,WAAW,IAAI;CACrC,MAAM,SAAS,MAAM,UAAU,IAAI;CACnC,IAAI,WAAW,QACb,OAAO,EAAE,UAAU;EAAE;EAAS;CAAO,EAAE;CAEzC,OAAO,CAAC;AACV;;;;;AAMA,SAAgB,gBAAgB,QAAoC;CAClE,OAAO,OAAO,aAAa;AAC7B"}